Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix code scanning alert related to ".." path scanning #514

Closed
laurentschoelens opened this issue Mar 4, 2024 · 0 comments · Fixed by #516, #531 or #535
Closed

Fix code scanning alert related to ".." path scanning #514

laurentschoelens opened this issue Mar 4, 2024 · 0 comments · Fixed by #516, #531 or #535
Assignees
@laurentschoelens
Labels
bug
Milestone
4.0.6

Comments

@laurentschoelens
Copy link
Collaborator

laurentschoelens commented Mar 4, 2024 •
edited
Loading

Tracking issue for issue code-scanning number 1
@laurentschoelens laurentschoelens added this to the 4.0.6 milestone Mar 4, 2024
@laurentschoelens laurentschoelens self-assigned this Mar 4, 2024
laurentschoelens added a commit to laurentschoelens/jaxb-tools that referenced this issue Mar 4, 2024
@laurentschoelens
[highsource#514] fix CVE on JarScanner
03b1960
@laurentschoelens laurentschoelens mentioned this issue Mar 4, 2024
Merged
mattrpav pushed a commit that referenced this issue Mar 4, 2024
@laurentschoelens @mattrpav
[#514] fix CVE on JarScanner
4a3fc57
laurentschoelens added a commit to laurentschoelens/jaxb-tools that referenced this issue Apr 1, 2024
@laurentschoelens
[highsource#514] fix contains('..') in path in jar file
7ba6830
@laurentschoelens laurentschoelens mentioned this issue Apr 1, 2024
Merged
laurentschoelens added a commit to laurentschoelens/jaxb-tools that referenced this issue Apr 1, 2024
@laurentschoelens
[highsource#514] fix path validation of jar entry files
6bdcbb7
@mattrpav mattrpav changed the title Fix code scanning alert Fix code scanning alert related to ".." path scanning Apr 9, 2024
mattrpav pushed a commit that referenced this issue Apr 9, 2024
@laurentschoelens @mattrpav
[#514] fix path validation of jar entry files
18c4f71
laurentschoelens added a commit to laurentschoelens/jaxb-tools that referenced this issue Apr 9, 2024
@laurentschoelens
[highsource#514] third try to fix security alert
329a885
@laurentschoelens laurentschoelens mentioned this issue Apr 9, 2024
Merged
mattrpav added a commit to mattrpav/jaxb-tools that referenced this issue Apr 9, 2024
@mattrpav
[highsource#514] Additional zip slip fixes
6f4eede
mattrpav added a commit to mattrpav/jaxb-tools that referenced this issue Apr 9, 2024
@mattrpav
[highsource#514] Additional zip slip fixes
6f8dc35
mattrpav added a commit to mattrpav/jaxb-tools that referenced this issue Apr 9, 2024
@mattrpav
[highsource#514] Additional zip slip fixes
08388f8
laurentschoelens added a commit to laurentschoelens/jaxb-tools that referenced this issue Apr 9, 2024
@laurentschoelens
[highsource#514] third try to fix security alert
fd9d771
mattrpav pushed a commit that referenced this issue Apr 9, 2024
@laurentschoelens @mattrpav
[#514] third try to fix security alert
da513ff
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@laurentschoelens laurentschoelens

Labels
bug
Projects
None yet
Milestone
4.0.6
1 participant
@laurentschoelens