Skip to content

Hayward 1.2.0

Marketplace
Marketplace

Choose a tag to compare

View all tags
@hedgerow-dev hedgerow-dev released this 27 Aug 19:34
· 4 commits to main since this release
v1.2.0
9062c40

Archive-safety detections and a reproducible accuracy measurement.

Added

  • MFV-ARCHIVE-001 (MEDIUM, CWE-22): an archive member whose name is unsafe as an extraction path (a .. segment, absolute, Windows drive, UNC, or NUL/newline), across the torch zip (.pt), the nested zip in a .mar, and the tar-based .nemo. .npz was already covered by MFV-NPZ-001.
  • MFV-ARCHIVE-002 (MEDIUM, CWE-22/59): an archive member that is a symlink or hard link whose target escapes the extraction directory. On extraction the loader creates the link, then a later member written through it lands wherever it points (the classic tar/zip symlink attack, CVE-2007-4559 family).

Fixed

  • Deny uuid._get_command_stdout and uuid._popen, subprocess gadgets (GHSA-g38g-8gr9-h9xp) that were only surfaced at INFO. The uuid module itself stays allowed. Found by a reproducible re-measurement of 1.1.0.

Docs

  • docs/accuracy.md now leads with a reproducible 1.1.0 detection measurement against the public picklescan corpus, with the exact commands.

CI

  • Concurrency-cancel and per-job timeouts to cap runner spend.
Assets 2
Loading