Skip to content
OpenAdvisories

Package · crates.io

nono-cli

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.6
    GHSA-hc4m-q9jh-xw4j

    nono-cli'scregistry pack verification can fail open when provenance metadata is absent

    ## Summary Registry-installed nono packs are expected to be verified from local provenance metadata before they are used. Two files are relevant: - `~/.config/nono/packages/lockfile.json` - `~/.config/nono/packages/<namespace>/<pack>/.nono-trust.bundle` Testi…

    nono-cli crates.io
  • Medium 6.1
    CVE-2026-47128

    nono: Sandbox escape on Linux via D-Bus: `systemd-run --user`

    nono is software that allows users to run AI agents in a zero-latency sandbox. Prior to version 0.55.0, the nono Landlock/seccomp policies allow access to local Unix domain sockets (concrete and abstract). This allows an easy sandbox escape by talking to the …

    always-further nono nono-cli crates.io