Repository navigation
Security: duxlabs-dev/dux-shell
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Pre-authentication OS command injection in the greeter username lookup (CWE-78)GHSA-4m52-vmq3-pfm2 published
Nov 4, 2026 by bbedwardHigh -
Session-user processes can end or weaken a DankMaterialShell lock, or run code inside it, without authenticating; proposal: an administrator-owned lock policyGHSA-v2m6-x338-9jwq published
Nov 4, 2026 by bbedwardLow -
Plugin component paths are not contained inside the plugin directoryGHSA-hw28-q22w-qqwq published
Nov 4, 2026 by bbedwardLow -
Plugin `permissions` is displayed as a security guarantee but never enforcedGHSA-85r4-w286-458c published
Nov 4, 2026 by bbedwardLow
Learn more about advisories related to duxlabs-dev/dux-shell in the GitHub Advisory Database