Skip to content

fix: bound keras zip config traversal #1555

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mldangelo-oai merged 7 commits into from
Jun 9, 2026
Merged

fix: bound keras zip config traversal #1555

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
813d3fd
fix: bound keras zip config traversal
mldangelo-oai Jun 7, 2026
2447f8e
Merge remote-tracking branch 'origin/main' into HEAD
mldangelo-oai Jun 8, 2026
8d6fa15
fix: bound keras config detector work
mldangelo-oai Jun 8, 2026
fe046f2
fix: reserve keras config traversal work
mldangelo-oai Jun 9, 2026
c0b5369
fix: bound keras config traversal end to end
mldangelo-oai Jun 9, 2026
793040a
fix: preserve admitted keras security findings
mldangelo-oai Jun 9, 2026
8ecc44a
merge main into keras traversal fix
mldangelo-oai Jun 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

### Bug Fixes

- bound Keras ZIP config traversal for CVE detectors and fail closed when config.json coverage budgets are exhausted
- redact MLflow registry, source, telemetry, and client exception credentials before logging, printing, or analytics export
- bound 7z member-name collection before archive entry-limit failures
- bound remote streaming-analysis reads and report actual received-byte coverage for truncated objects
Expand Down
Loading
Loading