Skip to content

Conversation

@isaacbmiller
Copy link
Collaborator

Fixes #9027

The original code was based on this blog post from simon wilson:

Later in the blog post, he makes a similar fix by restricting the reads to only be the cache dir+runner.js.

…nd Deno directory detection

- Added logging capabilities for better error tracking.
- Updated the Deno command to allow reading from specified paths, including the Deno cache directory.
- Implemented a class method to retrieve the Deno directory from the environment or by querying Deno directly.
@isaacbmiller isaacbmiller changed the title feat: Enhance PythonInterpreter to support dynamic read permissions and Deno directory detection fix(PythonInterpreter): Remove overly permissive read permissions and add strict allow Nov 20, 2025
@okhat okhat merged commit f32edbd into main Nov 21, 2025
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Vulnerability] CVE-2025-12695 vulnerability on version 3.0.3

3 participants