Skip to content
OpenAdvisories

Product · Dicklesworthstone

destructive_command_guard

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.1

    dcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-open

    destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substitutions are recursively rescanned after an inner scan returns unterminated, produci…