fix: harden path handling, redact approval secrets, and shorten OAuth proxy code TTL - #642

Open

mbathla-sudo wants to merge 6 commits into

zereight:mainfrom

mbathla-sudo:bugfix/vulnerability-fixes

Commits on Aug 6, 2026

added vulnerability fix for relative path secrets and other security issues
mbathla-sudo
committed
00c8eae

Commits on Aug 10, 2026

fix: harden path traversal and OAuth proxy-code replay handling

mbathla-sudo
and
cursoragent
committed
6106d23
fix: address review feedback on proxy-code cache and path checks

mbathla-sudo
and
cursoragent
committed
a678f08

Commits on Aug 13, 2026

fix: cap proxy-code TTL expiry and snapshot cwd for path checks

mbathla-sudo
and
cursoragent
committed
6800bd2
fix: add reservation IDs and atomic safe file I/O helpers

mbathla-sudo
and
cursoragent
committed
fd28b82
fix: check response body before opening download streams

mbathla-sudo
and
cursoragent
committed
8439938