Please use Github's private vulnerability reporting mechanism to report security-sensitive bugs.
Repository navigation
Security: sunfishcode/cap-std
Security
SECURITY.md
-
cap-std: `manually::open` follows symlinks via trailing slash, defeating `O_NOFOLLOW` (sandbox escape)GHSA-hp8f-xmx4-4qrg published
Aug 20, 2026 by sunfishcodeCritical -
cap-std doesn't fully sandbox all the Windows device filenamesGHSA-hxf5-99xg-86hw published
Nov 5, 2024 by sunfishcodeLow
Learn more about advisories related to sunfishcode/cap-std in the GitHub Advisory Database