CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49987

Repomix is a tool that packs repositories into AI-friendly files. Prior to 1.14.1, src/core/git/gitCommand.ts execGitShallowClone passes the --remote-branch value directly to git fetch and git checkout without validation or --end-of-options, allowing --upload-pack or other Git option injection that bypasses validateGitUrl() dangerous parameter checks and can execute commands through local or SSH-style transports. This issue is fixed in version 1.14.1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 40.3%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2026-49987

Yamadashy » Repomix » Version: N/A

cpe:2.3:a:yamadashy:repomix:-
Yamadashy » Repomix » Version: 0.1.1

cpe:2.3:a:yamadashy:repomix:0.1.1
Yamadashy » Repomix » Version: 0.1.10

cpe:2.3:a:yamadashy:repomix:0.1.10
Yamadashy » Repomix » Version: 0.1.11

cpe:2.3:a:yamadashy:repomix:0.1.11
Yamadashy » Repomix » Version: 0.1.12

cpe:2.3:a:yamadashy:repomix:0.1.12
Yamadashy » Repomix » Version: 0.1.13

cpe:2.3:a:yamadashy:repomix:0.1.13
Yamadashy » Repomix » Version: 0.1.14

cpe:2.3:a:yamadashy:repomix:0.1.14
Yamadashy » Repomix » Version: 0.1.15

cpe:2.3:a:yamadashy:repomix:0.1.15
Yamadashy » Repomix » Version: 0.1.16

cpe:2.3:a:yamadashy:repomix:0.1.16
Yamadashy » Repomix » Version: 0.1.18

cpe:2.3:a:yamadashy:repomix:0.1.18
Yamadashy » Repomix » Version: 0.1.19

cpe:2.3:a:yamadashy:repomix:0.1.19
Yamadashy » Repomix » Version: 0.1.2

cpe:2.3:a:yamadashy:repomix:0.1.2
Yamadashy » Repomix » Version: 0.1.20

cpe:2.3:a:yamadashy:repomix:0.1.20
Yamadashy » Repomix » Version: 0.1.21

cpe:2.3:a:yamadashy:repomix:0.1.21
Yamadashy » Repomix » Version: 0.1.22

cpe:2.3:a:yamadashy:repomix:0.1.22
Yamadashy » Repomix » Version: 0.1.23

cpe:2.3:a:yamadashy:repomix:0.1.23
Yamadashy » Repomix » Version: 0.1.24

cpe:2.3:a:yamadashy:repomix:0.1.24
Yamadashy » Repomix » Version: 0.1.25

cpe:2.3:a:yamadashy:repomix:0.1.25
Yamadashy » Repomix » Version: 0.1.26

cpe:2.3:a:yamadashy:repomix:0.1.26
Yamadashy » Repomix » Version: 0.1.27

cpe:2.3:a:yamadashy:repomix:0.1.27
Yamadashy » Repomix » Version: 0.1.28

cpe:2.3:a:yamadashy:repomix:0.1.28
Yamadashy » Repomix » Version: 0.1.29

cpe:2.3:a:yamadashy:repomix:0.1.29
Yamadashy » Repomix » Version: 0.1.3

cpe:2.3:a:yamadashy:repomix:0.1.3
Yamadashy » Repomix » Version: 0.1.30

cpe:2.3:a:yamadashy:repomix:0.1.30
Yamadashy » Repomix » Version: 0.1.31

cpe:2.3:a:yamadashy:repomix:0.1.31
Yamadashy » Repomix » Version: 0.1.32

cpe:2.3:a:yamadashy:repomix:0.1.32
Yamadashy » Repomix » Version: 0.1.33

cpe:2.3:a:yamadashy:repomix:0.1.33
Yamadashy » Repomix » Version: 0.1.34

cpe:2.3:a:yamadashy:repomix:0.1.34
Yamadashy » Repomix » Version: 0.1.35

cpe:2.3:a:yamadashy:repomix:0.1.35
Yamadashy » Repomix » Version: 0.1.36

cpe:2.3:a:yamadashy:repomix:0.1.36
Yamadashy » Repomix » Version: 0.1.37

cpe:2.3:a:yamadashy:repomix:0.1.37
Yamadashy » Repomix » Version: 0.1.38

cpe:2.3:a:yamadashy:repomix:0.1.38
Yamadashy » Repomix » Version: 0.1.39

cpe:2.3:a:yamadashy:repomix:0.1.39
Yamadashy » Repomix » Version: 0.1.4

cpe:2.3:a:yamadashy:repomix:0.1.4
Yamadashy » Repomix » Version: 0.1.40

cpe:2.3:a:yamadashy:repomix:0.1.40
Yamadashy » Repomix » Version: 0.1.41

cpe:2.3:a:yamadashy:repomix:0.1.41
Yamadashy » Repomix » Version: 0.1.42

cpe:2.3:a:yamadashy:repomix:0.1.42
Yamadashy » Repomix » Version: 0.1.43

cpe:2.3:a:yamadashy:repomix:0.1.43
Yamadashy » Repomix » Version: 0.1.44

cpe:2.3:a:yamadashy:repomix:0.1.44
Yamadashy » Repomix » Version: 0.1.45

cpe:2.3:a:yamadashy:repomix:0.1.45
Yamadashy » Repomix » Version: 0.1.5

cpe:2.3:a:yamadashy:repomix:0.1.5
Yamadashy » Repomix » Version: 0.1.6

cpe:2.3:a:yamadashy:repomix:0.1.6
Yamadashy » Repomix » Version: 0.1.7

cpe:2.3:a:yamadashy:repomix:0.1.7
Yamadashy » Repomix » Version: 0.1.8

cpe:2.3:a:yamadashy:repomix:0.1.8
Yamadashy » Repomix » Version: 0.1.9

cpe:2.3:a:yamadashy:repomix:0.1.9
Yamadashy » Repomix » Version: 0.2.0

cpe:2.3:a:yamadashy:repomix:0.2.0
Yamadashy » Repomix » Version: 0.2.1

cpe:2.3:a:yamadashy:repomix:0.2.1
Yamadashy » Repomix » Version: 0.2.10

cpe:2.3:a:yamadashy:repomix:0.2.10
Yamadashy » Repomix » Version: 0.2.11

cpe:2.3:a:yamadashy:repomix:0.2.11
Yamadashy » Repomix » Version: 0.2.12

cpe:2.3:a:yamadashy:repomix:0.2.12
Yamadashy » Repomix » Version: 0.2.13

cpe:2.3:a:yamadashy:repomix:0.2.13
Yamadashy » Repomix » Version: 0.2.14

cpe:2.3:a:yamadashy:repomix:0.2.14
Yamadashy » Repomix » Version: 0.2.15

cpe:2.3:a:yamadashy:repomix:0.2.15
Yamadashy » Repomix » Version: 0.2.16

cpe:2.3:a:yamadashy:repomix:0.2.16
Yamadashy » Repomix » Version: 0.2.17

cpe:2.3:a:yamadashy:repomix:0.2.17
Yamadashy » Repomix » Version: 0.2.18

cpe:2.3:a:yamadashy:repomix:0.2.18
Yamadashy » Repomix » Version: 0.2.19

cpe:2.3:a:yamadashy:repomix:0.2.19
Yamadashy » Repomix » Version: 0.2.2

cpe:2.3:a:yamadashy:repomix:0.2.2
Yamadashy » Repomix » Version: 0.2.20

cpe:2.3:a:yamadashy:repomix:0.2.20
Yamadashy » Repomix » Version: 0.2.21

cpe:2.3:a:yamadashy:repomix:0.2.21
Yamadashy » Repomix » Version: 0.2.22

cpe:2.3:a:yamadashy:repomix:0.2.22
Yamadashy » Repomix » Version: 0.2.23

cpe:2.3:a:yamadashy:repomix:0.2.23
Yamadashy » Repomix » Version: 0.2.24

cpe:2.3:a:yamadashy:repomix:0.2.24
Yamadashy » Repomix » Version: 0.2.25

cpe:2.3:a:yamadashy:repomix:0.2.25
Yamadashy » Repomix » Version: 0.2.26

cpe:2.3:a:yamadashy:repomix:0.2.26
Yamadashy » Repomix » Version: 0.2.28

cpe:2.3:a:yamadashy:repomix:0.2.28
Yamadashy » Repomix » Version: 0.2.29

cpe:2.3:a:yamadashy:repomix:0.2.29
Yamadashy » Repomix » Version: 0.2.3

cpe:2.3:a:yamadashy:repomix:0.2.3
Yamadashy » Repomix » Version: 0.2.30

cpe:2.3:a:yamadashy:repomix:0.2.30
Yamadashy » Repomix » Version: 0.2.31

cpe:2.3:a:yamadashy:repomix:0.2.31
Yamadashy » Repomix » Version: 0.2.32

cpe:2.3:a:yamadashy:repomix:0.2.32
Yamadashy » Repomix » Version: 0.2.33

cpe:2.3:a:yamadashy:repomix:0.2.33
Yamadashy » Repomix » Version: 0.2.34

cpe:2.3:a:yamadashy:repomix:0.2.34
Yamadashy » Repomix » Version: 0.2.35

cpe:2.3:a:yamadashy:repomix:0.2.35
Yamadashy » Repomix » Version: 0.2.36

cpe:2.3:a:yamadashy:repomix:0.2.36
Yamadashy » Repomix » Version: 0.2.37

cpe:2.3:a:yamadashy:repomix:0.2.37
Yamadashy » Repomix » Version: 0.2.38

cpe:2.3:a:yamadashy:repomix:0.2.38
Yamadashy » Repomix » Version: 0.2.39

cpe:2.3:a:yamadashy:repomix:0.2.39
Yamadashy » Repomix » Version: 0.2.4

cpe:2.3:a:yamadashy:repomix:0.2.4
Yamadashy » Repomix » Version: 0.2.40

cpe:2.3:a:yamadashy:repomix:0.2.40
Yamadashy » Repomix » Version: 0.2.41

cpe:2.3:a:yamadashy:repomix:0.2.41
Yamadashy » Repomix » Version: 0.2.42

cpe:2.3:a:yamadashy:repomix:0.2.42
Yamadashy » Repomix » Version: 0.2.43

cpe:2.3:a:yamadashy:repomix:0.2.43
Yamadashy » Repomix » Version: 0.2.5

cpe:2.3:a:yamadashy:repomix:0.2.5
Yamadashy » Repomix » Version: 0.2.6

cpe:2.3:a:yamadashy:repomix:0.2.6
Yamadashy » Repomix » Version: 0.2.7

cpe:2.3:a:yamadashy:repomix:0.2.7
Yamadashy » Repomix » Version: 0.2.8

cpe:2.3:a:yamadashy:repomix:0.2.8
Yamadashy » Repomix » Version: 0.2.9

cpe:2.3:a:yamadashy:repomix:0.2.9
Yamadashy » Repomix » Version: 0.3.0

cpe:2.3:a:yamadashy:repomix:0.3.0
Yamadashy » Repomix » Version: 0.3.1

cpe:2.3:a:yamadashy:repomix:0.3.1
Yamadashy » Repomix » Version: 0.3.2

cpe:2.3:a:yamadashy:repomix:0.3.2
Yamadashy » Repomix » Version: 0.3.3

cpe:2.3:a:yamadashy:repomix:0.3.3
Yamadashy » Repomix » Version: 0.3.4

cpe:2.3:a:yamadashy:repomix:0.3.4
Yamadashy » Repomix » Version: 0.3.5

cpe:2.3:a:yamadashy:repomix:0.3.5
Yamadashy » Repomix » Version: 0.3.6

cpe:2.3:a:yamadashy:repomix:0.3.6
Yamadashy » Repomix » Version: 0.3.7

cpe:2.3:a:yamadashy:repomix:0.3.7
Yamadashy » Repomix » Version: 0.3.8

cpe:2.3:a:yamadashy:repomix:0.3.8
Yamadashy » Repomix » Version: 0.3.9

cpe:2.3:a:yamadashy:repomix:0.3.9
Yamadashy » Repomix » Version: 1.0.0

cpe:2.3:a:yamadashy:repomix:1.0.0
Yamadashy » Repomix » Version: 1.1.0

cpe:2.3:a:yamadashy:repomix:1.1.0
Yamadashy » Repomix » Version: 1.10.0

cpe:2.3:a:yamadashy:repomix:1.10.0
Yamadashy » Repomix » Version: 1.10.1

cpe:2.3:a:yamadashy:repomix:1.10.1
Yamadashy » Repomix » Version: 1.10.2

cpe:2.3:a:yamadashy:repomix:1.10.2
Yamadashy » Repomix » Version: 1.11.0

cpe:2.3:a:yamadashy:repomix:1.11.0
Yamadashy » Repomix » Version: 1.11.1

cpe:2.3:a:yamadashy:repomix:1.11.1
Yamadashy » Repomix » Version: 1.12.0

cpe:2.3:a:yamadashy:repomix:1.12.0
Yamadashy » Repomix » Version: 1.13.0

cpe:2.3:a:yamadashy:repomix:1.13.0
Yamadashy » Repomix » Version: 1.13.1

cpe:2.3:a:yamadashy:repomix:1.13.1
Yamadashy » Repomix » Version: 1.14.0

cpe:2.3:a:yamadashy:repomix:1.14.0
Yamadashy » Repomix » Version: 1.2.0

cpe:2.3:a:yamadashy:repomix:1.2.0
Yamadashy » Repomix » Version: 1.2.1

cpe:2.3:a:yamadashy:repomix:1.2.1
Yamadashy » Repomix » Version: 1.3.0

cpe:2.3:a:yamadashy:repomix:1.3.0
Yamadashy » Repomix » Version: 1.4.0

cpe:2.3:a:yamadashy:repomix:1.4.0
Yamadashy » Repomix » Version: 1.4.1

cpe:2.3:a:yamadashy:repomix:1.4.1
Yamadashy » Repomix » Version: 1.4.2

cpe:2.3:a:yamadashy:repomix:1.4.2
Yamadashy » Repomix » Version: 1.5.0

cpe:2.3:a:yamadashy:repomix:1.5.0
Yamadashy » Repomix » Version: 1.6.0

cpe:2.3:a:yamadashy:repomix:1.6.0
Yamadashy » Repomix » Version: 1.6.1

cpe:2.3:a:yamadashy:repomix:1.6.1
Yamadashy » Repomix » Version: 1.7.0

cpe:2.3:a:yamadashy:repomix:1.7.0
Yamadashy » Repomix » Version: 1.8.0

cpe:2.3:a:yamadashy:repomix:1.8.0
Yamadashy » Repomix » Version: 1.9.0

cpe:2.3:a:yamadashy:repomix:1.9.0
Yamadashy » Repomix » Version: 1.9.1

cpe:2.3:a:yamadashy:repomix:1.9.1
Yamadashy » Repomix » Version: 1.9.2

cpe:2.3:a:yamadashy:repomix:1.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-49987

Products

Pricing

Contact Us