Jose Diaz-Gonzalez e78d3bcc78 Merge pull request #8591 from dokku/arbitrary-file-write ...

Harden archive extraction against symlink traversal

2026-05-09 15:58:31 -04:00

..

00_dokku-standard

Release 0.38.1

2026-05-07 17:29:53 +00:00

20_events

Release 0.38.1

2026-05-07 17:29:53 +00:00

app-json

Release 0.38.1

2026-05-07 17:29:53 +00:00

apps

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder-dockerfile

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-herokuish

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder-lambda

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-nixpacks

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-null

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder-pack

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-railpack

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

buildpacks

Release 0.38.1

2026-05-07 17:29:53 +00:00

builds

…

caddy-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00

certs

fix: prevent tar symlink traversal in archive extraction

2026-05-09 12:54:42 -04:00

checks

Release 0.38.1

2026-05-07 17:29:53 +00:00

common

feat: configure archive limits via git properties

2026-05-09 13:08:23 -04:00

config

Release 0.38.1

2026-05-07 17:29:53 +00:00

cron

Release 0.38.1

2026-05-07 17:29:53 +00:00

docker-options

Release 0.38.1

2026-05-07 17:29:53 +00:00

domains

Release 0.38.1

2026-05-07 17:29:53 +00:00

enter

Release 0.38.1

2026-05-07 17:29:53 +00:00

git

Merge pull request #8591 from dokku/arbitrary-file-write

2026-05-09 15:58:31 -04:00

haproxy-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00

logs

Release 0.38.1

2026-05-07 17:29:53 +00:00

network

Release 0.38.1

2026-05-07 17:29:53 +00:00

nginx-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00

openresty-vhosts

fix: sanitize openresty include filenames to prevent eval injection

2026-05-09 12:20:50 -04:00

plugin

Release 0.38.1

2026-05-07 17:29:53 +00:00

ports

Release 0.38.1

2026-05-07 17:29:53 +00:00

proxy

Release 0.38.1

2026-05-07 17:29:53 +00:00

ps

Release 0.38.1

2026-05-07 17:29:53 +00:00

registry

Release 0.38.1

2026-05-07 17:29:53 +00:00

repo

Release 0.38.1

2026-05-07 17:29:53 +00:00

resource

Release 0.38.1

2026-05-07 17:29:53 +00:00

run

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler-docker-local

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler-k3s

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler-null

Release 0.38.1

2026-05-07 17:29:53 +00:00

shell

Release 0.38.1

2026-05-07 17:29:53 +00:00

ssh-keys

Release 0.38.1

2026-05-07 17:29:53 +00:00

storage

Release 0.38.1

2026-05-07 17:29:53 +00:00

trace

Release 0.38.1

2026-05-07 17:29:53 +00:00

traefik-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00