p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de safeinstall-cli

Vulnerabilidades publicadas para safeinstall-cli en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidad: 1

  1. GHSA-xrmc-c5cg-rv7x

    Alta · CVSS 8.8Corrección disponible

    SafeInstall agent guard shell parsing can miss raw package execution

    ## Summary SafeInstall CLI through 0.10.1 can fail to recognize some package-manager and registry-runner commands in its agent guard. Case-variant launcher names, leading file-descriptor redirections, and supported shell wrappers with options can cause a raw install command to receive no guard decision. Remote project scaffolding through package-manager create/init commands can also avoid the approval decision used for other registry runners. ## Impact When the SafeInstall guard is installed for a coding agent, a crafted shell command can bypass the intended deny or ask response. The coding agent may then run a package installation or regi

    • Actualiza a 0.10.2
    Publicación Actualización

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →