@github/copilot vulnerabilities (npm)

2 vulnerabilities.

• @github/copilot npm GitHub Copilot CLI: Nested Bare Repository Can Execute Arbitrary Commands via core.fsmonitor CVE-2026-45033 Public exploitFix available 8.5 HighMay 11, 2026
• @github/copilot npm GitHub Copilot CLI allows for dangerous shell expansion patterns that enable arbitrary command execution CVE-2026-29783 Fix available 7.5 HighMarch 6, 2026