copilot_command_line_interface vulnerabilities

CVEs whose affected-version data names the copilot_command_line_interface package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-29783High· 7.8

8mo ago

The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns

The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns. An attacker who can influence the commands executed by the agent (e.g.…

▾ Twilightgithub · copilot_command_line_interfaceEPSS 0.47%via NVD