Security: patch critical vulnerabilities and remove hardcoded secrets - #2566

Open

gorevyoneticisi wants to merge 16 commits into

IceWhaleTech:mainfrom

gorevyoneticisi:security-fixes

Commits on Aug 4, 2026

security: fix all critical and high severity vulnerabilities
gorevyoneticisi
committed
1505e16
chore(deps): patch vulnerable dependencies
gorevyoneticisi
committed
d12195d
chore(deps): upgrade all deps to patch all Dependabot alerts
gorevyoneticisi
committed
84c6cb0
refactor: replace archiver/v3 with stdlib archive/zip and archive/tar
gorevyoneticisi
committed
0b24b77
fix: path traversal bypass in file upload handlers
gorevyoneticisi
committed
4b73123
fix: extract hardcoded IPs into reusable SSRF utility
gorevyoneticisi
committed
95243ef
refactor: reduce code duplication flagged by SonarCloud
gorevyoneticisi
committed
eedf547
fix: quote shell variables in helper.sh to prevent injection
gorevyoneticisi
committed
4b46a1f
fix: path traversal in InitFile handler and shell script security
gorevyoneticisi
committed
0ad8d19
refactor: merge ssrf.go into sanitize.go, compact archive writers
gorevyoneticisi
committed
75f1dd4
revert: restore separate archive writer types (zip/tar API mismatch)
gorevyoneticisi
committed
7bf0e22
style: further compact archive writers
gorevyoneticisi
committed
c45b132
Phase 1+2: Security fixes and auth hardening
gorevyoneticisi
committed
6e7b01c
Phase 9: Add documentation files
gorevyoneticisi
committed
daf4dde
refactor: reduce HTML error duplication in recover.go
gorevyoneticisi
committed
c59eff8
refactor: add ValidatePath/ValidatePaths helpers to reduce duplication
gorevyoneticisi
committed
e4957e2