Amagesh1

**Name of the Vulnerable Software and Affected Versions** DeepSeek-Reasonix Studio versions prior to 2.21.0 DeepSeek Reasonix npm versions prior to 1.39.3 **Description** An OS command injection flaw exists in the `internal/gitcmd` component of DeepSeek-Reasonix (Reasonix Studio). A local attacker who controls repository content, specifically the `.gitattributes` and `.git/config` files, can execute arbitrary commands through the desktop application's workspace-changes diff viewer. The issue occurs because the tool fails to restrict the Git clean filter, allowing a malicious repository configuration to define a filter containing attacker-controlled commands that are executed when a developer opens a file diff. Delivery of the malicious configuration typically requires mechanisms such as repository archives, synced folders, CI caches, or devcontainer builds, as standard HTTPS or SSH clones do not transfer the `.git/config` file. Additionally, a compromised or prompt-injected AI agent already running on a workstation could potentially write the poisoned configuration directly. **Recommendations** Update DeepSeek-Reasonix Studio to version 2.21.0. Update DeepSeek Reasonix npm package to version 1.39.3.

**Name of the Vulnerable Software and Affected Versions** vm2 versions prior to 3.11.7 **Description** A remote code execution issue exists when `require.external` is enabled without an explicit `require.root` that excludes `node modules`. This allows sandboxed code to require the vm2 package itself, instantiate an unrestricted NodeVM instance, and execute arbitrary host OS commands using `child process`. **Recommendations** Update to version 3.11.7 or later. As a temporary mitigation, ensure `require.root` is explicitly configured to exclude `node modules` when `require.external` is enabled.