github-actions[bot]
a019c12d7e
chore: bump version to 1.7.125 [skip ci]
2026-08-21 05:24:10 +00:00
github-actions[bot]
291b44dd93
chore: bump version to 1.7.124 [skip ci]
2026-08-21 04:17:00 +00:00
github-actions[bot]
71d3a8da55
chore: bump version to 1.7.123 [skip ci]
2026-08-21 03:23:18 +00:00
github-actions[bot]
1693a47759
chore: bump version to 1.7.122 [skip ci]
2026-08-21 03:02:12 +00:00
github-actions[bot]
cffa4cdcb8
chore: bump version to 1.7.121 [skip ci]
2026-08-21 02:01:00 +00:00
github-actions[bot]
4f77884129
chore: bump version to 1.7.120 [skip ci]
2026-08-21 01:42:32 +00:00
github-actions[bot]
4510143386
chore: bump version to 1.7.119 [skip ci]
2026-08-20 23:04:37 +00:00
github-actions[bot]
7af31c3331
chore: bump version to 1.7.118 [skip ci]
2026-08-20 22:50:28 +00:00
github-actions[bot]
a38cdc07b4
chore: bump version to 1.7.117 [skip ci]
2026-08-20 21:31:34 +00:00
github-actions[bot]
9e0f19c378
chore: bump version to 1.7.116 [skip ci]
2026-08-20 02:33:07 +00:00
github-actions[bot]
1c28afca44
chore: bump version to 1.7.115 [skip ci]
2026-08-20 02:16:48 +00:00
github-actions[bot]
343b4e3b14
chore: bump version to 1.7.114 [skip ci]
2026-08-20 01:54:09 +00:00
github-actions[bot]
3e0a5618e9
chore: bump version to 1.7.113 [skip ci]
2026-08-19 14:45:28 +00:00
github-actions[bot]
62d02682c2
chore: bump version to 1.7.112 [skip ci]
2026-08-19 12:44:53 +00:00
github-actions[bot]
766cd47fcc
chore: bump version to 1.7.111 [skip ci]
2026-08-19 05:37:24 +00:00
github-actions[bot]
237b3f6f00
chore: bump version to 1.7.110 [skip ci]
2026-08-19 04:07:56 +00:00
github-actions[bot]
6ae0903efa
chore: bump version to 1.7.109 [skip ci]
2026-08-18 22:15:43 +00:00
github-actions[bot]
45238c8110
chore: bump version to 1.7.108 [skip ci]
2026-08-18 12:35:54 +00:00
github-actions[bot]
dfc9608067
chore: bump version to 1.7.107 [skip ci]
2026-08-18 05:59:49 +00:00
github-actions[bot]
73f3e6c7d2
chore: bump version to 1.7.106 [skip ci]
2026-08-18 03:39:32 +00:00
github-actions[bot]
164b295db5
chore: bump version to 1.7.105 [skip ci]
2026-08-17 00:41:34 +00:00
github-actions[bot]
dfa6ce0d0b
chore: bump version to 1.7.104 [skip ci]
2026-08-16 22:09:36 +00:00
github-actions[bot]
6d6fa4bcc8
chore: bump version to 1.7.103 [skip ci]
2026-08-16 21:46:15 +00:00
github-actions[bot]
b6ad75352f
chore: bump version to 1.7.102 [skip ci]
2026-08-16 17:25:35 +00:00
github-actions[bot]
b7adf3b50b
chore: bump version to 1.7.101 [skip ci]
2026-08-15 08:57:35 +00:00
github-actions[bot]
d34edc94a9
chore: bump version to 1.7.100 [skip ci]
2026-08-15 08:26:30 +00:00
github-actions[bot]
b9e93989f5
chore: bump version to 1.7.99 [skip ci]
2026-08-14 21:09:00 +00:00
github-actions[bot]
07f146418e
chore: bump version to 1.7.98 [skip ci]
2026-08-14 18:47:56 +00:00
github-actions[bot]
c2ce4e4b96
chore: bump version to 1.7.97 [skip ci]
2026-08-14 18:21:28 +00:00
github-actions[bot]
838c032ccb
chore: bump version to 1.7.96 [skip ci]
2026-08-14 03:53:53 +00:00
github-actions[bot]
00f87d26de
chore: bump version to 1.7.95 [skip ci]
2026-08-14 00:29:40 +00:00
github-actions[bot]
fdb39a4e2d
chore: bump version to 1.7.94 [skip ci]
2026-08-13 19:38:33 +00:00
github-actions[bot]
0d3c7c63ce
chore: bump version to 1.7.93 [skip ci]
2026-08-13 18:42:41 +00:00
github-actions[bot]
be8f1b40a0
chore: bump version to 1.7.92 [skip ci]
2026-08-13 18:24:07 +00:00
github-actions[bot]
53f58d8477
chore: bump version to 1.7.91 [skip ci]
2026-08-13 12:37:21 +00:00
github-actions[bot]
ea2ee463b7
chore: bump version to 1.7.90 [skip ci]
2026-08-13 01:50:21 +00:00
github-actions[bot]
b09f1512fd
chore: bump version to 1.7.89 [skip ci]
2026-08-13 00:46:00 +00:00
github-actions[bot]
b1d0027a79
chore: bump version to 1.7.88 [skip ci]
2026-08-12 15:25:37 +00:00
github-actions[bot]
a52fb10f69
chore: bump version to 1.7.87 [skip ci]
2026-08-11 23:54:27 +00:00
Juan Denis and Tyler Boykin
9fb0a6cab5
fix(security): close git argument injection in repo_url/app_path/branch (GHSA-8vx6-432p-h62q)
...
An authenticated user of any role could inject arguments into git
subprocesses running as the backend user (root under systemd):
- repo_url was passed unvalidated to git ls-remote/clone, enabling the
ext:: transport (host command execution on git < 2.52 defaults) and
file:// local-repository disclosure (all git versions).
- app_path on POST /deploy/clone was passed without a '--' terminator,
enabling --upload-pack=<cmd> option injection independent of git
version and protocol.*.allow policy.
- branch flowed into 'git fetch origin <branch>' as an unterminated
refspec.
Fix (new app/utils/git_security.py applied at every affected sink):
- repo_url scheme allowlist (https/http/git/ssh + scp-like SSH);
rejects ext::/file://, local paths, leading '-', whitespace.
- '-c protocol.ext.allow=never -c protocol.file.allow=never' pinned on
every remote-touching git call, plus a restrictive GIT_ALLOW_PROTOCOL
in the subprocess environment.
- '--' positional terminator before URL/path/refspec arguments —
co-load-bearing with protocol pinning, which alone does not stop
option injection such as --upload-pack=<cmd>.
- branch/ref validation (leading '-', ref-format metacharacters) for
clone --branch, fetch refspecs and stored deploy configs.
- POST /deploy/clone now confines app_path to the managed apps root,
mirroring how /apps/from-repository derives it server-side.
Adds 31 regression tests; bumps version to 1.7.86.
Reported-by: CaptBoykin
Co-authored-by: Tyler Boykin <25166954+CaptBoykin@users.noreply.github.com >
2026-08-11 19:43:46 -04:00
github-actions[bot]
0f3554714d
chore: bump version to 1.7.85 [skip ci]
2026-08-09 03:39:05 +00:00
github-actions[bot]
308e3694da
chore: bump version to 1.7.84 [skip ci]
2026-08-06 12:32:38 +00:00
github-actions[bot]
20effa2a1b
chore: bump version to 1.7.83 [skip ci]
2026-08-06 05:34:26 +00:00
github-actions[bot]
7e20371f5c
chore: bump version to 1.7.82 [skip ci]
2026-08-06 02:54:34 +00:00
github-actions[bot]
20c25938c8
chore: bump version to 1.7.81 [skip ci]
2026-08-04 13:11:21 +00:00
github-actions[bot]
459d46d6f6
chore: bump version to 1.7.80 [skip ci]
2026-08-04 13:01:12 +00:00
github-actions[bot]
09eed1c5e7
chore: bump version to 1.7.79 [skip ci]
2026-08-03 04:17:36 +00:00
github-actions[bot]
ee18e2e884
chore: bump version to 1.7.78 [skip ci]
2026-08-02 22:58:13 +00:00
github-actions[bot]
b8a031e733
chore: bump version to 1.7.77 [skip ci]
2026-08-02 22:36:24 +00:00
github-actions[bot]
b4bea475a4
chore: bump version to 1.7.76 [skip ci]
2026-07-29 15:09:55 +00:00
github-actions[bot]