github-actions[bot]
73f3e6c7d2
chore: bump version to 1.7.106 [skip ci]
2026-08-18 03:39:32 +00:00
github-actions[bot]
164b295db5
chore: bump version to 1.7.105 [skip ci]
2026-08-17 00:41:34 +00:00
github-actions[bot]
dfa6ce0d0b
chore: bump version to 1.7.104 [skip ci]
2026-08-16 22:09:36 +00:00
github-actions[bot]
6d6fa4bcc8
chore: bump version to 1.7.103 [skip ci]
2026-08-16 21:46:15 +00:00
github-actions[bot]
b6ad75352f
chore: bump version to 1.7.102 [skip ci]
2026-08-16 17:25:35 +00:00
github-actions[bot]
b7adf3b50b
chore: bump version to 1.7.101 [skip ci]
2026-08-15 08:57:35 +00:00
github-actions[bot]
d34edc94a9
chore: bump version to 1.7.100 [skip ci]
2026-08-15 08:26:30 +00:00
github-actions[bot]
b9e93989f5
chore: bump version to 1.7.99 [skip ci]
2026-08-14 21:09:00 +00:00
github-actions[bot]
07f146418e
chore: bump version to 1.7.98 [skip ci]
2026-08-14 18:47:56 +00:00
github-actions[bot]
c2ce4e4b96
chore: bump version to 1.7.97 [skip ci]
2026-08-14 18:21:28 +00:00
github-actions[bot]
838c032ccb
chore: bump version to 1.7.96 [skip ci]
2026-08-14 03:53:53 +00:00
github-actions[bot]
00f87d26de
chore: bump version to 1.7.95 [skip ci]
2026-08-14 00:29:40 +00:00
github-actions[bot]
fdb39a4e2d
chore: bump version to 1.7.94 [skip ci]
2026-08-13 19:38:33 +00:00
github-actions[bot]
0d3c7c63ce
chore: bump version to 1.7.93 [skip ci]
2026-08-13 18:42:41 +00:00
github-actions[bot]
be8f1b40a0
chore: bump version to 1.7.92 [skip ci]
2026-08-13 18:24:07 +00:00
github-actions[bot]
53f58d8477
chore: bump version to 1.7.91 [skip ci]
2026-08-13 12:37:21 +00:00
github-actions[bot]
ea2ee463b7
chore: bump version to 1.7.90 [skip ci]
2026-08-13 01:50:21 +00:00
github-actions[bot]
b09f1512fd
chore: bump version to 1.7.89 [skip ci]
2026-08-13 00:46:00 +00:00
github-actions[bot]
b1d0027a79
chore: bump version to 1.7.88 [skip ci]
2026-08-12 15:25:37 +00:00
github-actions[bot]
a52fb10f69
chore: bump version to 1.7.87 [skip ci]
2026-08-11 23:54:27 +00:00
Juan Denis and Tyler Boykin
9fb0a6cab5
fix(security): close git argument injection in repo_url/app_path/branch (GHSA-8vx6-432p-h62q)
...
An authenticated user of any role could inject arguments into git
subprocesses running as the backend user (root under systemd):
- repo_url was passed unvalidated to git ls-remote/clone, enabling the
ext:: transport (host command execution on git < 2.52 defaults) and
file:// local-repository disclosure (all git versions).
- app_path on POST /deploy/clone was passed without a '--' terminator,
enabling --upload-pack=<cmd> option injection independent of git
version and protocol.*.allow policy.
- branch flowed into 'git fetch origin <branch>' as an unterminated
refspec.
Fix (new app/utils/git_security.py applied at every affected sink):
- repo_url scheme allowlist (https/http/git/ssh + scp-like SSH);
rejects ext::/file://, local paths, leading '-', whitespace.
- '-c protocol.ext.allow=never -c protocol.file.allow=never' pinned on
every remote-touching git call, plus a restrictive GIT_ALLOW_PROTOCOL
in the subprocess environment.
- '--' positional terminator before URL/path/refspec arguments —
co-load-bearing with protocol pinning, which alone does not stop
option injection such as --upload-pack=<cmd>.
- branch/ref validation (leading '-', ref-format metacharacters) for
clone --branch, fetch refspecs and stored deploy configs.
- POST /deploy/clone now confines app_path to the managed apps root,
mirroring how /apps/from-repository derives it server-side.
Adds 31 regression tests; bumps version to 1.7.86.
Reported-by: CaptBoykin
Co-authored-by: Tyler Boykin <25166954+CaptBoykin@users.noreply.github.com >
2026-08-11 19:43:46 -04:00
github-actions[bot]
0f3554714d
chore: bump version to 1.7.85 [skip ci]
2026-08-09 03:39:05 +00:00
github-actions[bot]
308e3694da
chore: bump version to 1.7.84 [skip ci]
2026-08-06 12:32:38 +00:00
github-actions[bot]
20effa2a1b
chore: bump version to 1.7.83 [skip ci]
2026-08-06 05:34:26 +00:00
github-actions[bot]
7e20371f5c
chore: bump version to 1.7.82 [skip ci]
2026-08-06 02:54:34 +00:00
github-actions[bot]
20c25938c8
chore: bump version to 1.7.81 [skip ci]
2026-08-04 13:11:21 +00:00
github-actions[bot]
459d46d6f6
chore: bump version to 1.7.80 [skip ci]
2026-08-04 13:01:12 +00:00
github-actions[bot]
09eed1c5e7
chore: bump version to 1.7.79 [skip ci]
2026-08-03 04:17:36 +00:00
github-actions[bot]
ee18e2e884
chore: bump version to 1.7.78 [skip ci]
2026-08-02 22:58:13 +00:00
github-actions[bot]
b8a031e733
chore: bump version to 1.7.77 [skip ci]
2026-08-02 22:36:24 +00:00
github-actions[bot]
b4bea475a4
chore: bump version to 1.7.76 [skip ci]
2026-07-29 15:09:55 +00:00
github-actions[bot]
e41d8af7a2
chore: bump version to 1.7.75 [skip ci]
2026-07-28 05:04:51 +00:00
github-actions[bot]
63b835c355
chore: bump version to 1.7.74 [skip ci]
2026-07-27 04:34:40 +00:00
github-actions[bot]
67cbb10c05
chore: bump version to 1.7.73 [skip ci]
2026-07-27 04:11:56 +00:00
github-actions[bot]
45ebb8e878
chore: bump version to 1.7.72 [skip ci]
2026-07-27 04:07:05 +00:00
github-actions[bot]
e73e6fc6b4
chore: bump version to 1.7.71 [skip ci]
2026-07-27 03:40:09 +00:00
github-actions[bot]
69b6ffb94a
chore: bump version to 1.7.70 [skip ci]
2026-07-27 03:19:39 +00:00
github-actions[bot]
4cb986ecb1
chore: bump version to 1.7.69 [skip ci]
2026-07-27 03:10:47 +00:00
github-actions[bot]
27e8004ce9
chore: bump version to 1.7.68 [skip ci]
2026-07-26 20:36:05 +00:00
github-actions[bot]
0129d7a13a
chore: bump version to 1.7.67 [skip ci]
2026-07-26 20:28:42 +00:00
github-actions[bot]
b6f689d572
chore: bump version to 1.7.66 [skip ci]
2026-07-26 19:45:24 +00:00
github-actions[bot]
d83d812a02
chore: bump version to 1.7.65 [skip ci]
2026-07-26 15:17:47 +00:00
github-actions[bot]
30f5ca71da
chore: bump version to 1.7.64 [skip ci]
2026-07-26 14:34:50 +00:00
github-actions[bot]
371df4d205
chore: bump version to 1.7.63 [skip ci]
2026-07-26 03:23:37 +00:00
github-actions[bot]
7f56441552
chore: bump version to 1.7.62 [skip ci]
2026-07-25 23:06:37 +00:00
github-actions[bot]
b04a5d1aa8
chore: bump version to 1.7.61 [skip ci]
2026-07-25 19:57:04 +00:00
github-actions[bot]
2785d0fc89
chore: bump version to 1.7.60 [skip ci]
2026-07-25 16:49:19 +00:00
github-actions[bot]
2febb54ecd
chore: bump version to 1.7.59 [skip ci]
2026-07-23 16:20:43 +00:00
github-actions[bot]
af50e2098d
chore: bump version to 1.7.58 [skip ci]
2026-07-23 14:32:36 +00:00
github-actions[bot]
ab836482a3
chore: bump version to 1.7.57 [skip ci]
2026-07-23 13:30:13 +00:00
github-actions[bot]