Angora

Angora Angora 是一个基于变异的覆盖引导模糊测试器。Angora 的主要目标是通过求解路径约束来提升分支覆盖率，而无需借助符号执行。 已发表论文 Arxiv: Angora: Efficient Fuzzing by Principled Search, S&P 2018. 构建 Angora 构建依赖 Linux-amd64（已在 Ubuntu 16.04/18.04 和 Debian Buster 上测试） Rust stable（= 1.31），可通过 rustup 获取 LLVM 4.0.0 - 12.0.1：运行 PREFIX=/path-to-install...

GHSA-M6RX-7PVW-2F73 OpenClaude: Sandbox Bypass via Early-Exit Logic Flaw Allows Path Traversal

A logic flaw exists in bashToolHasPermission inside src/tools/BashTool/bashPermissions.ts. When the sandbox auto-allow feature is active and no explicit deny rule is configured, the function returns an allow result immediately — before the path constraint filter checkPathConstraints is ever...

CVE-2026-35570 OpenClaude has Sandbox Bypass via Early-Exit Logic Flaw that Allows Path Traversal

OpenClaude is an open-source coding-agent command line interface for cloud and local model providers. Versions prior to 0.5.1 have a logic flaw in bashToolHasPermission inside src/tools/BashTool/bashPermissions.ts. When the sandbox auto-allow feature is active and no explicit deny rule is...