1 result · Clear filters · Feed
-
High 7.5
CLI Bridge: High-severity sandbox escape via dangling symlink
CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent d…