[GHSA-4c65-9gqf-4w8h] Record 0.5.10 as the fixed version for cai-framework

[tonytonycoder11]

Summary

The affected range closes with last_affected: 0.5.9, which leaves this advisory without a fixed version. The fix shipped in cai-framework 0.5.10, so the range should close with fixed: 0.5.10.

Evidence

Commit 09ccb6e, already referenced by this advisory, carries the fix and was committed on 9 December 2025. PyPI published 0.5.10 on 19 December 2025. The repository does not tag releases, so the published artifact is the reference point.

Comparing src/cai/tools/command_and_control/sshpass.py between the 0.5.9 and 0.5.10 sdists confirms the change reached the released package:

-    escaped_password = password.replace("'", "'\\''")
-    escaped_command = command.replace("'", "'\\''")
+    quoted_password = shlex.quote(password)
+    quoted_username = shlex.quote(username)
+    quoted_host = shlex.quote(host)
+    quoted_command = shlex.quote(command)

0.5.10 also rejects a port value that is not an integer between 1 and 65535. That covers the username, host and port injection points described in the advisory, which 0.5.9 left unquoted. PyPI lists no release between 0.5.9 and 0.5.10.

Validation

One advisory changed, one range event replaced. The file parses with python -m json.tool.