Zed LSP without Restricted Mode enabled allows a project's settings configuration to load arbitrary code when a repository is opened.
devdefender.netZed LSP Arbitrary Code ExecutionA vulnerability in the AI editor Zed allows for an attacker to modify the zed settings.json file to add an arbitrary script as an Language Server Protocol. When the malicious LSP is triggered, the cod...
0 reposts0 likes