GHSA-HQJG-PWW4-PCGQ @google/clasp vulnerable to unsafe path traversal cloning or pulling a malicious script

Impact Allows an attacker to perform a "Path Traversal" attack to modify files outside the projects directory, potentially allowing for running attacker code on the developer's machine. Patches Fixed in version 3.2.0 Workarounds Only clone or pull scripts from trusted sources Review the output of...

EUVD-2026-12047

@google/clasp vulnerable to unsafe path traversal cloning or pulling a malicious script...

Clasp 安全漏洞

Clasp is a command-line tool open-sourced by Google. Versions of Clasp prior to 3.2.0 contained a security vulnerability, which was caused by a path traversal issue, potentially leading to remote code execution...