Threats tagged 'ghsa-6cmq-892m-x8wh'

Highflame ramparts versions 0.8.1 through 0.8.10 have a security scan bypass vulnerability. This flaw allows attackers to hide malicious payloads by exploiting the way the software skips nested directories and .pyc files during scanning. Specifically, attackers can place an unchecked-hash .pyc file under scripts/<subdir>/__pycache__/ which ramparts ignores, but CPython executes when the skill runs. This can lead to unauthorized code execution without detection.