Skip to content

v2.0.1

Choose a tag to compare

View all tags
@mpangrazzi mpangrazzi released this 06 Oct 16:12
· 5 commits to main since this release
v2.0.1
ec83936
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security patch release: prevent pipeline deployment and undeployment from accessing unrelated filesystem paths.

  • Reject empty pipeline names, ., .., absolute paths, and path separators before filesystem changes.
  • Validate uploaded file keys, allowing nested files while rejecting absolute paths and traversal.
  • Check resolved containment, including symlinks, before writing or deleting persisted pipeline sources.
  • Return HTTP 422 for unsafe input and preserve existing data when validation fails.

Includes regression coverage for the absolute-name overwrite payload and symlink escapes. Backup and rollback paths are also validated, including restoration of contained absolute symlinks.

Fix: PR #272.

Full changelog

Assets 2
Loading