repomix vulnerabilities (npm)

2 vulnerabilities.

• repomix npm Repomix: attach_packed_output can bypass file-read secret scanning for supported local files CVE-2026-49988 Fix available 6.8 MediumJuly 1, 2026
• repomix npm Repomix: Command Injection (RCE) via `--remote-branch` Argument Injection CVE-2026-49987 Fix available 7.5 HighJuly 1, 2026