Unverified50% confidenceFactExact time
The core theme of version v0.14.25 is fixing a large number of security alerts (#22855) that span almost all sub-packages.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/4/2026
First Seen
Valid until: 1/2/2027
Sources
Related Entities
Related Claims
UnverifiedZed v1.17.1-pre fixes a potential filesystem sandbox escape vulnerability (#63144) that could allow extensions to access the host filesystem beyond their authorized scope.57% similarUnverifiedReitti fixed a security issue discovered through responsible vulnerability disclosure: a flaw in a setup process on already-configured instances could be exploited to gain administrator privileges.55% similarUnverifiedThe srcHunter skill package recommended by the author contains 19 attack-oriented prompts, 263 payload entries, EDR-bypass content, 2,887 real vulnerability reports from HackerOne, and 88,636 historical WooYun cases.55% similarUnverifiedIn the ctx package incident of 2022, an attacker hijacked a package with millions of downloads and stole sensitive information such as AWS keys.55% similarUnverifiedThe vulnerability fixed in version 0.65.5 is: when the requested table name contains a trailing newline character at the end, it is possible to bypass table-level permission checks and expose private row data that should be protected.55% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/971992API
curl https://kongchang.com/api/v1/knowledge/claims/971992MCP
get_claim(id=971992)