Repository navigation
What's Changed
- Security Fix: Hardened
resolveSafePath()against dangling-symlink write escapes (CWE-59) by validating unresolved paths withfs.lstatSync()and enforcing fail-closed ancestor verification. - Filesystem Handling: Added nearest-existing-ancestor resolution to support legitimate nested new file/directory creation for
write_file. - Documentation: Added clear configuration placeholders for Claude Desktop and Qwen Studio in
README.md.
Special thanks to @0xRomSec for discovering, responsibly reporting, and helping verify this security fix!