Skip to content

fix: validate file path in Blueprints::import() to prevent SSRF/LFI (CWE-918)#3656

Open
javokhir-sec wants to merge 11 commits into
Leantime:masterfrom
javokhir-sec:fix/ssrf-lfi-blueprints-import
Open

fix: validate file path in Blueprints::import() to prevent SSRF/LFI (CWE-918)#3656
javokhir-sec wants to merge 11 commits into
Leantime:masterfrom
javokhir-sec:fix/ssrf-lfi-blueprints-import

fix: create Blueprints/imports directory for allow-list validation

9ac10d0
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded Jul 21, 2026 in 2s

No new alerts in code changed by this pull request

View all branch alerts.