Skip to content

Security: Path safety check is vulnerable to symlink-based directory escape #465

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
tuanaiseo wants to merge 1 commit into
base: main
Choose a base branch
from
+27 −4

fix(security)(core): path safety check is vulnerable to symlink-based d

d1c3328
Select commit
Loading
Failed to load commit list.
Open

Security: Path safety check is vulnerable to symlink-based directory escape #465

fix(security)(core): path safety check is vulnerable to symlink-based d
d1c3328
Select commit
Loading
Failed to load commit list.
WIP / WIP succeeded Apr 23, 2026 in 1s

Ready for review

No match found based on configuration

Details

By default, WIP only checks the pull request title for the terms "WIP", "Work in progress" and "🚧".

You can configure both the terms and the location that the WIP app will look for by signing up for the pro plan: https://github.com/marketplace/wip. All revenue will be donated to Processing | p5.js – one of the most diverse and impactful Open Source community there is.

View more details on WIP