repomix

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

repomix records in CISA KEV

No repomix vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-42575 CVE-2026-59702 · GHSA-5wj3-m77q-j278

repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack

HIGH 79

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00414 Published 2026-07-08 Fixed in 1.14.1 CWE-918

TI-2026-42576 CVE-2026-59703 · GHSA-8wvr-gq96-hf34

repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpoint

HIGH 77

repomix contains a local file inclusion vulnerability in the git clone endpoint that allows unauthenticated attackers to read arbitrary local git repositories.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00514 Published 2026-07-08 Fixed in 1.14.1 CWE-552

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0