Prolix-oc Lumiverse vulnerabilities
- prolix-oc lumiverseLumiverse: Sign-up nonce race condition allows unauthorized account registration4.8 Medium
- prolix-oc lumiverseLumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan9.1 Critical
- prolix-oc lumiverseLumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape9.1 Critical
- prolix-oc lumiverseLumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass9.3 Critical
- prolix-oc lumiverseLumiverse: RCE via MCP stdio argument injection9.9 Critical