fix(sed): bound output growth during execution - #2455

Merged

chaliy merged 3 commits into

mainfrom

2026-09-25-propose-fix-for-sed-command-vulnerability

Sep 25, 2026

Commits on Sep 25, 2026

fix(sed): bound output growth during execution
chaliy
committed
23cc236
fix(sed): bound sinks by the live budget, not the stdout cap
chaliy
committed
2c77530
docs(threat-model): port TM-DOS-112 to the public threat model
chaliy
committed
06de33a