https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 19:23:06 +0000 https://db.gcve.eu/vuln/cve-2026-120202 <p><strong>Affected:</strong> highflame-ai ramparts</p> <p>Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/&lt;subdir&gt;/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.</p> <p><strong>Affected:</strong> highflame-ai ramparts</p> <p>Highflame ramparts 0.8.1 through 0.8.10 contains a security scan bypass vulnerability that allows attackers to hide malicious payloads because collect_bundle_siblings and walk_bundle_subdir skip nested directories and .pyc files. Attackers can distribute a skill bundle with an unchecked-hash .pyc under scripts/&lt;subdir&gt;/__pycache__/ that ramparts silently ignores, while CPython executes it when the skill runs.</p> https://db.gcve.eu/vuln/cve-2026-120202