Lucene search
+L

162 matches found

Github Security Blog
Github Security Blog
•added 2026/10/06 6:58 p.m.•15 views

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

Overview A critical Arbitrary Code Execution ACE vulnerability exists in the Knowns Language Server Protocol LSP detection and startup pipeline. The system blindly trusts the settings.lsp.languages..binary field defined in the project-level .knowns/config.json file. Because this field is never...

8.5CVSS6AI score0.00212EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder