Only the current major release receives security patches.

Please do not report security vulnerabilities through public GitHub issues.

Use GitHub's built-in private disclosure mechanism:

1. Go to https://github.com/juan294/summon/security/advisories
2. Click "Report a vulnerability"
3. Fill in the details — include steps to reproduce, impact assessment, and any suggested mitigations

Send a report to juan294@gmail.com with the subject line: [summon] Security vulnerability report

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

We follow coordinated disclosure. We will notify you before publishing any advisory.

src/shell-escape.lint.test.ts is the primary injection defense for this project. It is a load-bearing CI gate that statically scans all source files and fails if any raw template literal interpolates a user-controlled value into an AppleScript or shell context.

This test must never be removed or disabled. Its removal would silently eliminate the primary defense against AppleScript/shell injection in the generated workspace scripts. See src/shell-escape.ts for the escape functions it protects.

If you discover that this test can be bypassed — for example, through a code path that constructs AppleScript outside of the tracked escape functions — please report it as a security vulnerability using the process above.

Summon executes commands configured in .summon project files. As of v0.8.0+, a project .summon file must be trusted before its commands are executed. On a terminal, a launch shows an untrusted file and asks Trust this file and continue? [y/N]; without a terminal it fails with exit 1, and summon session (a named session or --all) skips the project. summon trust <dir> grants trust ahead of time. See the README for details on the trust model.

This tool runs on macOS only. Under Ghostty it invokes osascript with generated AppleScript; under Rex it invokes the rex CLI with a generated session.create request whose pane shells start under /usr/bin/env (src/backends/rex/layout.ts). The main attack surface is:

• AppleScript injection via workspace config values (project names, commands, environment variables)
• Shell injection via the same config values when constructing shell commands, including the pane bootstrap and cleanup-trap fragments of each launch (src/launch-identity.ts)
• Rex request injection via the same values in the session.create request (argv and environment of each block)
• Per-launch files under ~/.config/summon/status/<project>.launches/ (manifests, pane files, liveness files): a launch's cleanup trap removes only its own files, and summon clean removes another launch's files only after proving its process dead or its Rex session gone
• Trust bypass in the .summon file allowlist (src/trust.ts)

Out of scope: issues requiring physical access to the machine, issues in development dependencies not affecting the published CLI.