Umijs Umi
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Umijs Umi.
By the Year
In 2026 there have been 1 vulnerability in Umijs Umi with an average score of 5.5 out of ten.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 5.50 |
It may take a day or so for new Umi vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Umijs Umi Security Vulnerabilities
Umijs Umi <=4.6.63: GIT File Helper OS command injection
CVE-2026-16492
5.5 - Medium
- July 22, 2026
A weakness has been identified in umijs umi up to 4.6.63. The affected element is the function git.getFileCreateInfo of the file packages/utils/src/getFileGitIno.ts of the component GIT File Helper. This manipulation causes os command injection. The exploit has been made available to the public and could be used for attacks. Upgrading to version 4.6.64 is sufficient to fix this issue. Patch name: b6da12c17b024a43badb1fa565720c38cf42e647. Upgrading the affected component is advised.
Shell injection
