Skip to content

fix(cursor): bind installed-bundle read to opened descriptor and bound-size read to prevent FIFO/TOCTOU block - #466

Draft
luvs01 wants to merge 76 commits into
Devfrom
codex/propose-fix-for-cursor-bundle-vulnerability
Draft

fix(cursor): bind installed-bundle read to opened descriptor and bound-size read to prevent FIFO/TOCTOU block#466
luvs01 wants to merge 76 commits into
Devfrom
codex/propose-fix-for-cursor-bundle-vulnerability

Commits

Commits on Sep 6, 2026

Commits on Sep 7, 2026