Skip to content

v0.51.465

Choose a tag to compare

View all tags
@github-actions github-actions released this 16 Jun 22:34
· 60 commits to master since this release
v0.51.465
67b1c85
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release PZ — workspace null-byte hardening

Fixed

  • Remote workspace paths with an embedded null byte are now rejected (#4326). Completes the #4273/#3664 remote-workspace trust-boundary hardening (v0.51.463): _remote_terminal_workspace_candidate fails closed on a \x00 in the candidate path or terminal.cwd, before normalization — previously such a path slipped past the containment check. Thanks @rodboev.

Contributors

rodboev
Assets 2
Loading