A vulnerability was discovered in the `fast-agent serve` command. By default, it binds to all network interfaces on port 8000 without authentication, allowing any host with network access to control the agent. When the `--shell` flag is used, an unauthenticated remote client can execute arbitrary OS commands, resulting in unauthenticated remote code execution (RCE). This is due to the agent's default configuration in `cli/commands/serve.py`, `mcp/server/agentserver.py`, and `tools/localshellexecutor.py`. This vulnerability affects versions up to 0.7.20, including the Docker Python 3.13-slim image.

A security vulnerability has been discovered in the ezBookkeeping software, specifically in its use of the Gin framework. The vulnerability allows an attacker to bypass the source-IP allowlist by sending a spoofed `X-Forwarded-For` header, which is trusted by Gin due to a lack of explicit proxy configuration. This allows the attacker to access the system and forge attribution by setting the client IP address to the attacker-supplied header value. The impact is that an attacker can bypass security controls and remain anonymous, making it difficult to track and audit activities.

A vulnerability was discovered in the Shadow plugin for Gradle, a tool for creating shadow JARs. The issue arises from the plugin's reliance on Gradle's ZipFileTree for entry sanitization, which does not validate or sanitize ZIP entry names. This allows malicious upstream dependencies to include path traversal sequences, enabling an attacker to inject malicious entries into the output JAR. The vulnerability affects Gradle versions 7.6.2 and 8.x up to 8.2.0, making users directly exploitable. The issue also compromises downstream consumers who use unprotected extraction or older CI tooling, potentially allowing arbitrary file overwrites.