OrbisAI Security 1943131ced fix: multiple subprocess calls accept user-controlle... in index.ts (#4754) ...

* fix: V-001 security vulnerability

Automated security fix generated by OrbisAI Security

* fix: multiple subprocess calls accept user-controlle... in index.ts

Multiple subprocess calls accept user-controlled arguments without proper validation or sanitization, allowing attackers to inject shell metacharacters and execute arbitrary commands on the host system

* Apply code changes: Hey @orbisai0security — @PerishCode's blocking rev...

2026-06-26 13:56:50 +00:00

..

cli-args.test.ts

[codex] Load tools-dev env files (#4430)

2026-06-17 12:26:00 +08:00

desktop-auth-gate.test.ts

fix(tools-dev): preserve web origin trust on web start (#2715)

2026-05-23 00:25:43 +08:00

diagnostics.test.ts

Keep PR 2400 changes without folder pickers (#2462)

2026-05-20 22:07:30 +08:00

local-env.test.ts

[codex] Load tools-dev env files (#4430)

2026-06-17 12:26:00 +08:00

run-logged-command.test.ts

fix: multiple subprocess calls accept user-controlle... in index.ts (#4754)

2026-06-26 13:56:50 +00:00

shared-ports.test.ts

fix(tools-dev): preserve web origin trust on web start (#2715)

2026-05-23 00:25:43 +08:00