162 matches found
knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json
Overview A critical Arbitrary Code Execution ACE vulnerability exists in the Knowns Language Server Protocol LSP detection and startup pipeline. The system blindly trusts the settings.lsp.languages..binary field defined in the project-level .knowns/config.json file. Because this field is never...
8.5CVSS6AI score0.00212EPSS
SaveExploits0References8Affected Software1
20