Repository navigation

Fix jq expression injection in user-supplied filters (CVE-2026-123084) - #8340

Open

decko wants to merge 3 commits into

decko:pulp-2649-jq-env-shadow

Open

Fix jq expression injection in user-supplied filters (CVE-2026-123084)#8340
decko wants to merge 3 commits into
pulp:mainfrom
decko:pulp-2649-jq-env-shadow

Commits on Nov 11, 2026
- Fix jq expression injection in user-supplied filters (PULP-2649)
  decko
  committed
  03b8ae8
- Add regression test for per-character environment oracle (PULP-2649)
  decko
  committed
  a38dba5
Commits on Nov 12, 2026
- Address review findings for the jq filter fix (PULP-2649)
  decko
  committed
  e6d7b88