Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:31:14 +0000 CVE-2026-86540 — knowns before 0.30.0 Arbitrary Code Execution via LSP Binary https://vulnerability.circl.lu/vuln/cve-2026-86540 <p><strong>Affected:</strong> knowns-dev knowns</p> <p>knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binary path is executed twice under the user&#39;s account without any verification.</p> <p><strong>Affected:</strong> knowns-dev knowns</p> <p>knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary binaries by crafting a malicious .knowns/config.json file. When a repository with a crafted configuration is opened, the unvalidated binary path is executed twice under the user&#39;s account without any verification.</p> https://vulnerability.circl.lu/vuln/cve-2026-86540