来自MSN

Cursor patched a silent repo-poisoning zero-day with no advisory and no CVE

Clone a stranger's repository and open it in Cursor on Windows. That is the entire exploit. If the repository contains a file ...