GHSA-m8j6-rc5x-wv36

Source

https://github.com/advisories/GHSA-m8j6-rc5x-wv36

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-m8j6-rc5x-wv36/GHSA-m8j6-rc5x-wv36.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-m8j6-rc5x-wv36

Published

2026-06-26T20:41:59Z

Modified

2026-06-26T20:45:12Z

Severity

5.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N CVSS Calculator

Summary

nono-py's policy JSON accepts unknown security fields

Details

Summary

nono-py policy handling could fail open in two ways. First, resolving a policy-derived ProxyConfig did not automatically enforce CapabilitySet.proxy_only, allowing sandboxed children to bypass a resolved domain allowlist by using direct network access. Second, policy JSON accepted unknown security-sensitive fields, so misspelled or unsupported restrictions could be silently ignored.

Impact

A sandboxed child may receive broader network access than the policy author intended. This can allow outbound requests outside the configured proxy allowlist and may expose sensitive data depending on the execution environment and workload.

Older-kernel note

On Linux kernels without Landlock ABI v4 network rules, patched versions continue to support proxy-only enforcement through the seccomp supervisor fallback introduced in 807fb4b. Users on older kernels should ensure policy-resolved proxy configurations are coupled to CapabilitySet.proxy_only(proxy); merely injecting proxy environment variables is not sufficient.

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-06-26T20:41:59Z",
    "nvd_published_at":  null,
    "severity":  "MODERATE"
}

References

Affected packages

PyPI / nono-py

Package

Name: nono-py; View open source insights on deps.dev
Purl: pkg:pypi/nono-py

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.10.1

Affected versions

0.*

0.1.0

0.2.0

0.3.1

0.4.0

0.4.2

0.5.0

0.6.0

0.7.0

0.7.2

0.8.0

0.9.0

0.9.2

0.10.0

Database specific

last_known_affected_version_range

"<= 0.10.0"

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-m8j6-rc5x-wv36/GHSA-m8j6-rc5x-wv36.json"