Homepage

agentic-flow@2.0.1-alpha

The agentic meta-harness — freeze the model, evolve the harness. An open runtime that routes each query to the cost-optimal model, evolves its own harness (planner/context/reviewer/retry/tool/memory/score policy) and autonomously repairs code, then orches

  • latest version

    2.1.2

  • latest non vulnerable version

    3.0.0-alpha.2

  • first published

    9 months ago

  • latest version published

    16 hours ago

  • licenses detected

  • View agentic-flow package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the agentic-flow package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Command Injection

    agentic-flow is a The agentic meta-harness — freeze the model, evolve the harness. An open runtime that routes each query to the cost-optimal model, evolves its own harness (planner/context/reviewer/retry/tool/memory/score policy) and autonomously repairs code, then orches

    Affected versions of this package are vulnerable to Command Injection in the process that interpolates user-supplied parameters into shell command strings executed by execSync. An attacker can execute arbitrary operating system commands with the privileges of the server process by supplying crafted input values that break out of the intended command context.

    How to fix Command Injection?

    Upgrade agentic-flow to version 2.0.14 or higher.

    <2.0.14
    Go back to all versions of this package