Skip to content

v0.1.1 — Security Patch

Choose a tag to compare

View all tags
@magifd2 magifd2 released this 26 Apr 23:29
· 436 commits to main since this release
v0.1.1
34f0799

Security patch

Hardening pass against prompt-injection, SQL-injection, and resource exhaustion.

Fixes

  • weather.sh — pass region/XML via env vars (was shell-expanded into Python heredoc, allowing code execution if LLM was induced to supply a malicious region string)
  • chat — sanitize location before embedding in system prompt (strips control chars/newlines, caps length)
  • findings / memory.pinned — sanitize stored content before embedding in system prompt
  • analysis — validate file paths and escape SQL strings in LoadCSV/LoadJSON/LoadJSONL; enforce MaxQueryRows (10000)
  • agent — propagate cancellation context into shell tool execution; validate MCP guardian binary executable bit and profile path before launch; separate Info/Debug logging (message bodies no longer at Info)
  • objstore — tighten new-object file permissions to 0600

Tests

  • internal/chat/sanitize_test.go
  • internal/findings/sanitize_test.go
  • internal/analysis/security_test.go

See CHANGELOG.md for the full list.

Assets 3
Loading