Threats tagged 'ghsa-c46v-j7qf-v42g'

A code injection vulnerability exists in vibesurf-ai VibeSurf up to commit cd6e519d507cdd4d63061300bf60fb176e1f57e0 in the Python Validation Handler component. The vulnerability allows remote attackers to inject code, potentially impacting confidentiality, integrity, and availability. The product uses a rolling release model, so specific affected versions are not provided. The vendor has not responded to the disclosure, and no patch information is available.