Skip to content

Fix: LSP spawns planted project node_modules/.bin binaries on host (RCE, sandbox bypass) - #343

Open
superagent-security-dev[bot] wants to merge 1 commit into
mainfrom
superagent/patch-0ad8c677-6ef6-49f8-ba7d-a0f1b26de473
Open

Fix: LSP spawns planted project node_modules/.bin binaries on host (RCE, sandbox bypass)#343
superagent-security-dev[bot] wants to merge 1 commit into
mainfrom
superagent/patch-0ad8c677-6ef6-49f8-ba7d-a0f1b26de473

Apply Superagent patch: Fix: LSP spawns planted project node_modules/…

cac92b6
Select commit
Loading
Failed to load commit list.
Cursor / Cursor Bugbot succeeded Jul 6, 2026 in 27s

Bugbot Review

Bugbot Analysis Progress (29s elapsed)

✅ Gathered PR context (2s)
✅ Completed bug detection (26s)
✅ Posted analysis results (1s)

Final Result: Bugbot completed review - no issues found! ✅

Request ID: serverGenReqId_f51a6b9c-4ba6-44d9-9d82-450ef99f955b

Details