Yuval Moravchick

**Name of the Vulnerable Software and Affected Versions** Pake versions prior to 3.13.1 **Description** The `download file` Tauri command fails to sanitize the JavaScript-supplied filename before joining it to the user's Downloads directory. This allows a filename containing an absolute path or path traversal sequences (such as `../`) to resolve to locations outside the intended directory. The command then fetches content from a supplied URL using Rust HTTP and writes it to the resolved path. A script capable of invoking this command can overwrite user-writable files to establish persistence, such as through macOS LaunchAgents, Linux autostart, or Windows Startup, resulting in code execution within the user account. All desktop applications generated from an affected Pake tree are subject to this issue. **Recommendations** Update Pake to version 3.13.1 or later.

**Name of the Vulnerable Software and Affected Versions** NoteGen versions prior to 0.32.0 **Description** Cross-site scripting occurs when AI chat responses are rendered using markdown-it with the `html:true` configuration and injected into the DOM via `dangerouslySetInnerHTML` in the chat-preview component. The application lacks HTML sanitization and has the Content Security Policy (CSP) set to null. An attacker can provide malicious content to the model prompt, such as a crafted `REFERENCE.md` file, to force the model to generate executable markup, including an `img` `onerror` handler. This allows arbitrary JavaScript execution within the privileged Tauri webview application context. **Recommendations** Update NoteGen to version 0.32.0 or later.

**Name of the Vulnerable Software and Affected Versions** NoteGen versions prior to 0.32.0 **Description** NoteGen grants the Tauri shell plugin `shell:allow-execute` capability for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. This allows JavaScript running in the application webview to invoke `plugin:shell|execute` to run attacker-controlled operating system commands with the privileges of the NoteGen process. When combined with script execution in the webview, such as through chat XSS (Cross-Site Scripting, a technique where malicious scripts are injected into trusted websites), this can lead to full remote code execution on the user's machine. **Recommendations** Update NoteGen to version 0.32.0 or later.

**Name of the Vulnerable Software and Affected Versions** vektah gqlparser version 2.5.10 **Description** An issue in the vektah gqlparser open-source-library allows a remote attacker to cause a denial of service via a crafted script to the `parserDirectives` function. This issue can be exploited to overload the parser, resulting in a denial of service. **Recommendations** For version 2.5.10, consider disabling the `parserDirectives` function as a temporary workaround until a patch is available. Restrict access to the `parseDirectives` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.