v1.1.0 - Security Release

Security Fixes

This release addresses multiple security vulnerabilities in the scanner:

Critical

• Command Injection in CLI - create-pr command now uses spawnSync with array arguments and sanitizes branch names
• Command Injection in Container Scanner - Uses execFileAsync instead of shell interpolation, validates Docker image names

High

• SSRF in URL Scanner - Validates URL protocols (http/https only), blocks private IPs, localhost, and cloud metadata endpoints
• Race Condition - Container scanner now uses unique temp directories via mkdtempSync
• Path Traversal - Workspace glob patterns now validate resolved paths stay within root directory

Medium

• DoS Prevention - Added 100MB file size limits to all lockfile parsers (npm, yarn, pnpm)
• ReDoS Prevention - Added 10MB payload size limit in middleware detector before regex matching

Changes

• 8 files modified with security hardening
• All 122 tests pass
• No breaking changes to public API

Upgrade

```bash
npm install react2shell-guard@latest

or

npx react2shell-guard@latest scan .
```