Angora

Angora Angora è un fuzzer guidato dalla copertura basato su mutazioni. L'obiettivo principale di Angora è aumentare la copertura dei rami risolvendo i vincoli di percorso senza esecuzione simbolica. Lavoro Pubblicato Arxiv: Angora: Efficient Fuzzing by Principled Search, S&P 2018. Compilazione di...

GHSA-M6RX-7PVW-2F73 OpenClaude: Sandbox Bypass via Early-Exit Logic Flaw Allows Path Traversal

A logic flaw exists in bashToolHasPermission inside src/tools/BashTool/bashPermissions.ts. When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an allow result immediately — before the path constraint filter checkPathConstraints is ever...

CVE-2026-35570 OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in bashToolHasPermission inside src/tools/BashTool/bashPermissions.ts. When the sandbox auto-allow feature is active and no explicit deny rule is...