CVE-2026-63496

Published 9 November 2026 · tracked since 10 November 2026

Description

augment-vir is a collection of helper functions. Prior to version 31.73.5, the grep() function exported by @augment-vir/node inserts caller-controlled search patterns directly into a double-quoted shell command string without sanitization (grep.ts:310). When the constructed command is passed to spaw

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-124604 MEDIUM 6.2
• CVE-2026-124603 MEDIUM 6.2
• CVE-2026-124602 MEDIUM 6.2
• CVE-2026-124601 MEDIUM 6.2
• CVE-2026-124599 MEDIUM 6.2
• CVE-2026-124598 HIGH 7.5
• CVE-2026-109810 MEDIUM 6.1
• CVE-2026-109799 HIGH 7.5
• CVE-2026-109797 HIGH 7.1
• CVE-2026-107244 HIGH 7.6

→ Open the live CVE board · all tools