Threats affecting pkg:brew/repomix

Repomix MCP server's attach_packed_output tool can bypass secret scanning when reading local .json, .txt, .md, or .xml files. This allows reading arbitrary local files without the secret check enforced by the file_system_read_file tool. The issue affects repomix versions from 0.2.1 up to but not including 1.14.1 and is fixed in version 1.14.1.

repomix versions from 0.2.1 up to but not including 1.14.1 contain a command injection vulnerability via the `--remote-branch` CLI argument. This argument is passed unsanitized to git subprocesses, allowing injection of arbitrary git options such as `--upload-pack` that can execute attacker-controlled scripts with the user's privileges. The vulnerability bypasses existing URL validation controls because the branch parameter is not validated. A fix is available in version 1.14.1 that adds proper argument delimiters and validation.