CVE-2026-45311

CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the runtests tool executes cargo test in the workspace with ApprovalRequirement::Auto, meaning it runs without any user approval prompt. cargo test compiles and executes arbitrary code: test binaries, build.rs build...

SandboxJS 安全漏洞

SandboxJS is a security assessment software by nyariv individual developers. A security vulnerability exists in SandboxJS version 0.8.23 and earlier, which stems from prototype contamination and could result in a denial of service or escape from the sandbox environment...