[KongchangAI]
Unverified50% confidenceFactExact time

The new version fixes a vulnerability in zsh commands where command substitutions hidden within REPORTTIME, REPORTMEMORY, or DIRSTACKSIZE assignments were automatically allowed through; they will now correctly trigger approval prompts

1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/11/2026
First Seen
Valid until: 12/10/2026

Sources

Related Entities

Related Claims

Cite This Claim

Stable URI
https://kongchang.com/claim/897966
API
curl https://kongchang.com/api/v1/knowledge/claims/897966
MCP
get_claim(id=897966)