Skip to content

Fix jq expression injection in user-supplied filters (CVE-2026-123084) - #8340

Open
decko wants to merge 3 commits into
pulp:mainfrom
decko:pulp-2649-jq-env-shadow
Open

decko wants to merge 3 commits into
pulp:mainfrom
decko:pulp-2649-jq-env-shadow

Address review findings for the jq filter fix (PULP-2649)

e6d7b88
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

3 warnings and 1 notice
Label PR
succeeded Nov 12, 2026 in 14s