cli-bridge vulnerabilities

1 known vulnerability in cli-bridge from Anshupriyan. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  cli-bridge: Improper Link Resolution Before File Access

  CVE-2026-111045Oct 19, 2026Anshupriyan

  CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent di