Homepage

decepticon-core@1.1.13

Decepticon contract layer: pure types, protocols, plugin contracts, registry primitives

  • latest version

    1.2.1

  • latest non vulnerable version

    1.2.1

  • first published

    4 months ago

  • latest version published

    5 hours ago

  • licenses detected

  • View decepticon-core package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the decepticon-core package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

    decepticon-core is a Decepticon contract layer: pure types, protocols, plugin contracts, registry primitives

    Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via UntrustedOutputMiddleware._format_envelope and PromptInjectionShieldMiddleware._wrap_untrusted, which emit attacker-controlled tool output verbatim without neutralizing chat-template special-token literals. A ChatML literal such as <|im_start|> planted in tool output (web crawl results, recon scan output, bash stdout) is passed to a self-hosted tokenizer that parses it into a structural role-delimiter token, forging an operator or system turn the model treats as authoritative. This bypasses the quarantine envelope and enables arbitrary command execution in the sandbox.

    Note: This is only exploitable when Decepticon is configured with a BYOK OpenAI-compatible backend whose tokenizer preserves special-token IDs (vLLM, SGLang, TGI, and Ollama are confirmed vulnerable); hosted vendors such as OpenAI and Anthropic strip these tokens server-side.

    How to fix Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')?

    Upgrade decepticon-core to version 1.1.17 or higher.

    [,1.1.17)
    Go back to all versions of this package