Threats tagged 'brew-repomix-cve-2026-49988'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.8	CVE-2026-49988repomix · attach_packed_output can bypass file-read secret scanning for supported local files Medium6.82026-08-13GCVE DatabaseCVE-2026-49988 Repomix MCP server's attach_packed_output tool can bypass secret scanning when reading local .json, .txt, .md, or .xml files. This allows reading arbitrary local files without the secret check enforced by the file_system_read_file tool. The issue affects repomix versions from 0.2.1 up to but not including 1.14.1 and is fixed in version 1.14.1. Report on CVE-2026-49988 Vulnerability #brew-repomix-cve-2026-49988 #homebrew	GCVE Database	2026-08-13

Page 1 of 1