Anshupriyan vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Anshupriyan products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-111045 High · 7.5 CWE-59 Oct 19, 2026

CLI Bridge: High-severity sandbox escape via dangling symlink

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path as safe, so write_file follows the link and can write arbitrary files outside the workspace root. This issue is fixed in version 0.0.2.