Snyk Security Database

@nuxt/content is a Write your content inside your Nuxt app

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the assertSafeQuery function in src/runtime/internal/security.ts, which validates the attacker-controlled sql field accepted by the unauthenticated POST /__nuxt_content/:collection/query endpoint in src/runtime/api/query.post.ts. The validator blocks only a short denylist of SQL command keywords and does not reject SQLite built-in functions such as randomblob(), zeroblob(), hex(), and length(). A remote attacker can submit a single request whose WHERE clause chains these functions to force SQLite to allocate hundreds of megabytes of memory and perform CPU-intensive work, which blocks the synchronous better-sqlite3 sink in src/runtime/internal/database.server.ts and stalls the entire Node.js event loop for the duration of the query.

Note: Fully static prerendered deployments that do not expose the server endpoint are not affected.

autogen is an A programming framework for agentic AI

Affected versions of this package are vulnerable to Command Injection via ShellAdapter._filter() in ag2/tools/sandbox/adapter/shell.py and contains_shell_operator() in ag2/tools/sandbox/filter.py, which omit newline (\n) and carriage-return (\r) characters from the set of recognized shell statement separators. When SandboxShellTool is configured with allowed=[...] or readonly=True, the filter validates only that the command starts with an allowed prefix and contains no listed shell operators, but the raw string is then passed to sh -c. Because a POSIX shell treats an embedded newline identically to a ; statement separator, an attacker-influenced agent command of the form "cat allowed_file.txt\nrm -rf /anything" passes both the prefix check and the operator check, then causes the shell to execute both statements. With the default LocalEnvironment backend, the injected statement runs as a host subprocess with the full privileges of the agent process.

Note: This is only exploitable when SandboxShellTool is configured with allowed=[...] or readonly=True.

commons-codec:commons-codec is a package that contains simple encoder and decoders for various formats such as Base64 and Hexadecimal.

Affected versions of this package are vulnerable to Improper Neutralization of Null Byte or NUL Character via the GitIdentifiers class in the digest component. An attacker can make distinct directory trees produce the same Git tree identifier or SWHID by supplying an entry name containing a NUL byte, which Git treats as the end of the name. This affects applications that build trees from externally supplied names, such as archive entries or direct API input; trees built by walking common file systems are not affected.