Security: bytecodealliance/cap-std
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
cap-std: `manually::open` follows symlinks via trailing slash, defeating `O_NOFOLLOW` (sandbox escape)GHSA-hp8f-xmx4-4qrg published
Aug 20, 2026 by sunfishcodeCritical -
cap-std doesn't fully sandbox all the Windows device filenamesGHSA-hxf5-99xg-86hw published
Nov 5, 2024 by sunfishcodeLow