Filters apply as you choose them.
samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file.