Threats affecting pkg:github/intina47/context-sync

CVE-2026-7062 is a medium severity OS command injection vulnerability in Intina47 context-sync version 2.0.0 and earlier. It affects an unspecified part of the src/git-integration.ts file within the Git Integration component. The vulnerability allows remote attackers to execute arbitrary OS commands due to improper input handling. Although the exploit has been publicly disclosed, there are no known exploits in the wild at this time. No official patch or remediation guidance has been provided by the vendor yet.