|
0193ca4a7d
|
Fix shell injection in jpseek analyzer via password field (#195)
* Initial plan
* Fix shell injection vulnerability in jpseek analyzer (CVE-style: command injection via password field)
- Replace bash -c with direct expect invocation
- Pass password via JPSEEK_PASS env variable to prevent injection
- Quote file paths with Tcl braces for safety
- Bump version to 3.2.1
- Add CHANGELOG.md
Agent-Logs-Url: https://github.com/Zeecka/AperiSolve/sessions/8c64fc67-869e-442e-9be9-ad2fef4ae738
Co-authored-by: Zeecka <24873615+Zeecka@users.noreply.github.com>
* Remove CHANGELOG.md
Agent-Logs-Url: https://github.com/Zeecka/AperiSolve/sessions/a5f3aa6c-72f5-48de-9cb6-65845bef19a1
Co-authored-by: Zeecka <24873615+Zeecka@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Zeecka <24873615+Zeecka@users.noreply.github.com>
|
2026-03-30 17:27:39 +02:00 |
|