Skip to content

Fuzzer idempotent map#33

Merged
2over12 merged 11 commits intomainfrom
ian/fuzzer-idempotent-map
Jan 27, 2025
Merged

Fuzzer idempotent map#33
2over12 merged 11 commits intomainfrom
ian/fuzzer-idempotent-map

Conversation

@2over12
Copy link
Copy Markdown
Contributor

@2over12 2over12 commented Jan 26, 2025

Closes #16

@2over12 2over12 marked this pull request as ready for review January 26, 2025 21:01
Copy link
Copy Markdown
Collaborator

@ret2libc ret2libc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

could you add a small test in the common/test dir for the RedisMap since it might get used in multiple places?

@2over12 2over12 force-pushed the ian/fuzzer-idempotent-map branch from 58c18cd to 52beb87 Compare January 27, 2025 13:23
@2over12 2over12 merged commit cf4f716 into main Jan 27, 2025
@michaelbrownuc michaelbrownuc deleted the ian/fuzzer-idempotent-map branch June 25, 2025 17:02
dguido pushed a commit that referenced this pull request Aug 18, 2025
* add map implementation

* use target map in orchestrator

* fix up fuzzer bot

* remove target list queue

* format

* lint fixes

* to redis

* add test

* type bound

* format

* format
hbrodin added a commit that referenced this pull request Feb 4, 2026
Upgrade FastAPI from ~0.115.6 to ~0.128.0 in orchestrator to allow
starlette >= 0.49.1, fixing:

- CVE-2025-62727 (High): O(n^2) DoS via Range header in FileResponse
- CVE-2025-54121 (Medium): DoS via large multipart file parsing

The orchestrator uses FileResponse and StaticFiles (the affected
components) in the competition API UI.

Resolves: Dependabot alerts #33, #34
hbrodin added a commit that referenced this pull request Feb 4, 2026
Upgrade FastAPI from ~0.115.6 to ~0.128.0 in orchestrator to allow
starlette >= 0.49.1, fixing:

- CVE-2025-62727 (High): O(n^2) DoS via Range header in FileResponse
- CVE-2025-54121 (Medium): DoS via large multipart file parsing

The orchestrator uses FileResponse and StaticFiles (the affected
components) in the competition API UI.

Resolves: Dependabot alerts #33, #34
hbrodin added a commit that referenced this pull request Feb 4, 2026
… (#465)

Upgrade FastAPI from ~0.115.6 to ~0.128.0 in orchestrator to allow
starlette >= 0.49.1, fixing:

- CVE-2025-62727 (High): O(n^2) DoS via Range header in FileResponse
- CVE-2025-54121 (Medium): DoS via large multipart file parsing

The orchestrator uses FileResponse and StaticFiles (the affected
components) in the competition API UI.

Resolves: Dependabot alerts #33, #34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Make the target set list idempotent

2 participants