VDB
Sign up

package

npm/agentic-flow

pkg:npm/agentic-flow

HIGH8.8npm
GHSA-vcv2-r9jh-99m5· CVE-2026-58195

Agentic-Flow: OS Command Injection in agentic-flow MCP server tools via unsanitized tool-parameter interpolation into execSync

Modified: 7/19/2026