category: runtime clear
CVE-2023-43115: Ghostscript IJS device bypasses -dSAFER (path-traversal + RCE)
glibc CVE-2023-4911 Looney Tunables Buffer Overflow
CVE-2014-7169: Bash parser-state leak via env-imported function definitions
CVE-2014-6271 Shellshock — bash function import via env var executes trailing commands
Gemini Vertex AI http_script sandbox: unhandled exceptions crash Node process despite try/catch wrappers
TypeBox Type.Any() params silently dropped by OpenClaw plugin deserialization