Jose Diaz-Gonzalez 2df0791fcd fix: prevent tar symlink traversal in archive extraction ...

Archives passed to git:from-archive and certs:add were extracted without symlink or path validation, allowing a crafted archive to write arbitrary files anywhere writable by the dokku user via symlink traversal. Extraction now pre-scans entries for absolute paths, parent traversal, and unsafe symlinks, applies the GNU tar `--no-unsafe-links` flag when available, and validates symlinks after extraction.

2026-05-09 12:54:42 -04:00

2.6 KiB

Executable File

Raw Blame History

View Raw