Skip to content

Security patch: Add json.loads on bytes and use errors = replace#644

Merged
bitterpanda63 merged 2 commits into
mainfrom
fix-intigriti-cves-for-byte-body-decoding
Jun 1, 2026
Merged

Security patch: Add json.loads on bytes and use errors = replace#644
bitterpanda63 merged 2 commits into
mainfrom
fix-intigriti-cves-for-byte-body-decoding

Conversation

@bitterpanda63
Copy link
Copy Markdown
Member

@bitterpanda63 bitterpanda63 commented May 20, 2026

Summary by Aikido

Security Issues: 0 Quality Issues: 0 Resolved Issues: 0

⚡ Enhancements

  • Attempted JSON parsing on byte bodies and used replacement decoding.
  • Changed path byte decoding to use utf-8 with replacement characters.
  • Passed raw request body bytes to context instead of pre-decoding.

More info

Comment thread aikido_zen/context/__init__.py
@bitterpanda63 bitterpanda63 merged commit a72a7d6 into main Jun 1, 2026
170 of 178 checks passed
@bitterpanda63 bitterpanda63 deleted the fix-intigriti-cves-for-byte-body-decoding branch June 1, 2026 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants