Katriel Moses

Charmbracelet Wish 2.0.5 Path Traversal via git Middleware

WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows

Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket

Perry < 0.5.1166 JWT Expiration Bypass via verify_decode

Medplum < 5.1.14 SSRF via FHIR Subscription Endpoint

KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

Claude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable

Claude HUD 0.0.12 Path Traversal via transcript_path

Claude HUD 0.0.12 Terminal Injection via OSC 8 Hyperlinks