GHSA-G3XQ-3GMV-QQ8G claude-code-cache-fix vulnerable to local code execution via Python triple-quote injection in tools/quota-statusline.sh

Summary tools/quota-statusline.sh introduced in v3.5.0 interpolates Claude Code's hook stdin payload directly into a Python triple-quoted string literal. A ''' byte sequence in any user-controlled field of the payload closes the literal early and lets following bytes execute as Python in the user...

EUVD-2024-21612

Malicious code in bioql PyPI...

EUVD-2021-28110

Malicious code in bioql PyPI...

EUVD-2021-33171

Malicious code in bioql PyPI...

EUVD-2021-33173

Malicious code in bioql PyPI...

EUVD-2021-33154

Malicious code in bioql PyPI...

EUVD-2021-33183

Malicious code in bioql PyPI...

EUVD-2021-33182

Malicious code in bioql PyPI...

EUVD-2021-33159

Malicious code in bioql PyPI...

EUVD-2021-33158

Malicious code in bioql PyPI...

EUVD-2021-33179

Malicious code in bioql PyPI...

EUVD-2021-33165

Malicious code in bioql PyPI...

CVE-2023-34660

jjeecg-boot V3.5.0 has an unauthorized arbitrary file upload in /jeecg-boot/jmreport/upload interface...

CVE-2021-46501

Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46490

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-40956

LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...

CVE-2024-6445 Authenticated Local File Inclusion (LFI) in DataFlowX's DataDiodeX

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in DataFlowX Technology DataDiodeX allows Path Traversal. This issue affects DataDiodeX: from v3.0.0 before v3.1.7...

CVE-2024-24189

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

Design/Logic Flaw

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

Heap overflow

Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...