cleveragents/cleveragents-core
4
0
Fork 3
Code Issues 6.0k Pull Requests 115 Actions Packages Projects Releases Wiki Activity

fix(security): fix file_tools.py validate_path startswith bypass #7478 (#11002) #11033

Closed
HAL9000 wants to merge 1 commits from pr-fix-11002-issue-7478 into master
pull from: pr-fix-11002-issue-7478
merge into: cleveragents:master
Conversation 3 Commits 1 Files Changed 3
+14 -1

1 Commits

Author SHA1 Message Date
HAL9000 361c89addd fix(security): fix file_tools.py validate_path startswith bypass #7478
CI / benchmark-publish (pull_request) Has been skipped
Details
CI / push-validation (pull_request) Successful in 39s
Details
CI / helm (pull_request) Successful in 46s
Details
CI / build (pull_request) Successful in 1m4s
Details
CI / lint (pull_request) Successful in 1m22s
Details
CI / typecheck (pull_request) Successful in 1m38s
Details
CI / quality (pull_request) Successful in 1m41s
Details
CI / security (pull_request) Successful in 1m41s
Details
CI / benchmark-regression (pull_request) Failing after 1m4s
Details
CI / e2e_tests (pull_request) Successful in 3m49s
Details
CI / integration_tests (pull_request) Successful in 3m52s
Details
CI / unit_tests (pull_request) Successful in 6m9s
Details
CI / docker (pull_request) Successful in 1m58s
Details
CI / coverage (pull_request) Successful in 13m0s
Details
CI / status-check (pull_request) Successful in 3s
Details 
- Add CHANGELOG.md Security section entry under [Unreleased] for the
  validate_path path traversal prefix-collision bypass vulnerability.
- Update CONTRIBUTORS.md with HAL 9000 contribution description for
  issue #7478 (file_tools.py validate_path startswith bypass fix).
- Fix BDD test scenario tag from @tdd_issue_7558 to @tdd_issue_7478
  in features/tool_builtins.feature.

ISSUES CLOSED: #7478
 2026-05-08 14:36:41 +00:00