Incidents tagged arbitrary code execution

Evidence indicates that GitHub is affected by remote code execution. Reported affected versions include < 1.83.11.

Evidence indicates that Custom Code Guardrails is affected by remote code execution.

A security flaw in the Cursor AI code editor, a Visual Studio Code fork, allows for silent arbitrary code execution when a maliciously crafted repository is opened. This vulnerability stems from "Workspace Trust" being disabled by default, enabling tasks configured in `.vscode/tasks.json` to auto-execute and posing a significant supply chain risk.

Evidence indicates that transformers library is affected by remote code execution.