Ruvnet Agentic-flow vulnerabilities

• ruvnet agentic-flow Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync CVE-2026-58195 Fix available 8.8 HighJune 19, 2026