Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/10/20 7:48 p.m.•3 views

launch-editor: `fs.existsSync()` existence check can be bypassed on Windows

Summary launch-editor checked fs.existsSyncfileName before passing a supplied path to an editor command. On Windows, an attacker can bypass this check with a crafted path ending in \..:line:column. This removes the requirement that the attacker be able to place a file with a malicious filename...

7.5CVSS6AI score
SaveExploits0References5Affected Software3
Rows per page
Query Builder