Mitigate CVE-2025-69872: HMAC-verified pickle envelope - #361

Open

yeshsurya wants to merge 6 commits into

grantjenks:masterfrom

yeshsurya:fix/cve-2025-69872-pickle-hmac

Commits on May 5, 2026

Mitigate CVE-2025-69872: HMAC-verified pickle envelope

Yeshwanth Nagaraj
and
Copilot
committed
fbeaaf7

Commits on May 6, 2026

Address 32-reviewer audit: path traversal, FanoutCache, races, more

Yeshwanth Nagaraj
and
Copilot
committed
bacedee
Address pass-3 audit: 8 high+medium fixes (V1-V3, V5-V6, V9, V11, V13)

Yeshwanth Nagaraj
and
Copilot
committed
b233190

Commits on May 7, 2026

Address pass-4 audit: 8 high+medium fixes (V14-V19, V21-V22)

Yeshwanth Nagaraj
and
Copilot
committed
ef0f3d5
Address pass-5 audit: 8 fixes (O1-O4 + Y1-Y3 + L1)

Yeshwanth Nagaraj
and
Copilot
committed
ae17756
Address pass-6 audit: 4 fixes (L1 + C1 + L2 + C2 tests)

Yeshwanth Nagaraj
and
Copilot
committed
f98f218