CVE-2026-86540: knowns Arbitrary Code Execution via the LSP Binary Override
Cloning a repository should not run its code. In knowns before 0.30.0, a project configuration file could name any binary — and opening the repository executed it twice.
taxonomy / tag