Açıklama

DirectoryPromptRegistry in banks did not reject symbolic links for index.json or for .jinja prompt files (CWE-59, CWE-22). Where untrusted users can influence a prompt directory, for example through an extracted archive or a shared repository, a link pointing outside the registry root lets get() and _scan() disclose a file and set() overwrite one. Fixed in 2.5.1 (PR #79).

CVSS Vektörü

Birincil değerlendirmeGitHub CNA · 7.3 HighCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
AV: Yerel (Local)AC: Düşük (Low)AT: Mevcut (Present)PR: Düşük (Low)UI: Yok (None)VC: Yüksek (High)VI: Yüksek (High)VA: Düşük (Low)SC: Yok (None)SI: Yok (None)SA: Yok (None)

Bildirim Durumu

Etkilenen sürümler
banks before 2.5.1
Yama durumu
Fixed in 2.5.1
Üretici yanıtı
Maintainer merged the fix (PR #79) and published GHSA-556j-vv39-8rqv
Birincil puan kaynağı
GitHub CNA

Referanslar

Kayıt Doğrulama

KrediGitHub advisory GHSA-556j-vv39-8rqv, bildiren olarak Sevban DÖNMEZ (jankesec) adını belirtir
YayınlanmaCVE kaydı 2026-10-08 tarihinde yayınlandı
KontrolMetaveriler son olarak 2026-10-30 tarihinde CVE Services kaydıyla doğrulandı

Bildirim Zaman Çizelgesi

2026-09-10Fix merged — The maintainer merged the change that rejects symbolic links in the prompt registry (PR #79). Kaynak ↗
2026-10-08Published — GitHub, as CNA, published the CVE record and advisory GHSA-556j-vv39-8rqv. Kaynak ↗
2026-10-09Record update — CISA added its Vulnrichment (SSVC) assessment to the CVE record.
2026-10-30Site verification — jankesec checked the CVE record, score, affected versions, and references.