https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 09:47:29 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-120202 <p>Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/&lt;subdir&gt;/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.</p> <p>Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/&lt;subdir&gt;/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.</p> https://db.gcve.eu/vuln/fkie_cve-2026-120202 https://db.gcve.eu/vuln/ghsa-6cmq-892m-x8wh <p>Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/&lt;subdir&gt;/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.</p> <p>Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/&lt;subdir&gt;/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.</p> https://db.gcve.eu/vuln/ghsa-6cmq-892m-x8wh