A vulnerability in Cursor that allows arbitrary code execution simply by 'opening the repository' has not been fixed even 7 months after it was reported, and researchers have now published the full details. - GIGAZINE