Flight Log / JonMarkGo-AI-Testing/juice-shop #197
Fix path traversal vulnerability in vulnCodeSnippet.ts — a Devin (Cognition) bot flight
The Devin bot (Cognition) opened this pull request in JonMarkGo-AI-Testing/juice-shop on Mar 20, 2025; closed.
Flown by
- Lines
- —
- Files
- —
- Commits
- —
- Reviews
- —
- To merge
- —
From the pull request description
This PR fixes a path traversal vulnerability in routes/vulnCodeSnippet.ts where file paths were constructed directly from user-controlled data (key parameter). The fix adds validation to ensure the key parameter contains only alphanumeric characters, underscores, and hyphens before using it to cons…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Read next
Cite this flight: AgentRiders Flight Log, JonMarkGo-AI-Testing/juice-shop#197, record updated Nov 3, 2026, https://agentriders.com/logs/JonMarkGo-AI-Testing/juice-shop/197/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.