1 story taggedcode execution.
A security firm disclosed the bug seven months ago. Cursor has still not patched it, leaving more than seven million developers exposed.