alex s dfdbe4b2ab fix(image): patch brotli decoder (CVE-2026-111497) in sandbox, bump tag 1.3.0 -> 1.3.1 (#1617) ...

kali-rolling still ships libbrotli 1.2.0-4; node, curl and python3 in the
sandbox all load the shared libbrotlidec, so a malicious Content-Encoding: br
response would hit the vulnerable decoder. Install Debian's fixed 1.2.0-4.1
packages over Kali's and fail the build if the version is not applied.

2026-10-28 19:58:04 -04:00

..

build.sh

feat(tui): replace Textual with a Go/Bubble Tea interface (#941)

2026-08-03 19:23:07 -07:00

docker.sh

feat: Migrate from Poetry to uv (#379)

2026-03-31 17:20:41 -07:00

install.sh

fix(image): patch brotli decoder (CVE-2026-111497) in sandbox, bump tag 1.3.0 -> 1.3.1 (#1617)

2026-10-28 19:58:04 -04:00

tui_sidecar_hook.py

fix(build): keep the TUI sidecar hook importable on hatchling 1.32.1 (#1325)

2026-09-16 14:25:38 -04:00