Fix shell injection in jpseek analyzer via password field (#195)

* Initial plan

* Fix shell injection vulnerability in jpseek analyzer (CVE-style: command injection via password field)

- Replace bash -c with direct expect invocation
- Pass password via JPSEEK_PASS env variable to prevent injection
- Quote file paths with Tcl braces for safety
- Bump version to 3.2.1
- Add CHANGELOG.md

Agent-Logs-Url: https://github.com/Zeecka/AperiSolve/sessions/8c64fc67-869e-442e-9be9-ad2fef4ae738

Co-authored-by: Zeecka <24873615+Zeecka@users.noreply.github.com>

* Remove CHANGELOG.md

Agent-Logs-Url: https://github.com/Zeecka/AperiSolve/sessions/a5f3aa6c-72f5-48de-9cb6-65845bef19a1

Co-authored-by: Zeecka <24873615+Zeecka@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Zeecka <24873615+Zeecka@users.noreply.github.com>

This commit is contained in:

Copilot

2026-03-30 17:27:39 +02:00

committed by

GitHub

co-authored by

Zeecka

copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

parent a3d37681ec

commit 0193ca4a7d

2 changed files with 10 additions and 8 deletions

									
										pyproject.toml
									
		+1
		-1
	
												View File
												
				@@ -3,7 +3,7 @@

				[project]

				name = "aperisolve"

				version = "3.2.0"

				version = "3.2.1"

				description = "Open-source steganalysis web platform for automated image analysis and steganography detection"

				readme = "README.md"

				requires-python = ">=3.12"