Skip to content

Prevent path traversal in tool config names #2910

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jmthomas merged 3 commits into from
Mar 5, 2026

Use allowlist for tool config name validation instead of denylist

e6efccb
Select commit
Loading
Failed to load commit list.
Merged

Prevent path traversal in tool config names #2910

Use allowlist for tool config name validation instead of denylist
e6efccb
Select commit
Loading
Failed to load commit list.
Socket Security / Socket Security: Pull Request Alerts succeeded Mar 4, 2026 in 5s

Pull Request #2910 Alerts: Skipped

Report Status Message
PR #2910 Alerts ✅ Pull request contains no net changes to dependencies

Pull request alerts notify when new issues are detected between the diff of the pull request and it's target branch.

Details

No dependency changes detected. Learn more about Socket for GitHub.

👍 No dependency changes detected in pull request

View more details on Socket Security