fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484] - #25

Open

maunilm wants to merge 9 commits into

mainfrom

fix/DEVA11Y-484-bsdtar-size-limit

Commits on May 29, 2026

fix(security): cap bsdtar extraction size to prevent decompression bomb DoS [DEVA11Y-484]

maunilm
and
claude
committed
7e139ab

Commits on Jun 2, 2026

test(security): real-process regression suite for the bsdtar extraction guard [DEVA11Y-484]

maunilm
and
claude
committed
0cc2b6b
fix(security): tighten watchdog overshoot, guard Windows path, assert live termination [DEVA11Y-484]

maunilm
and
claude
committed
6264227

Commits on Aug 27, 2026

Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit

maunilm
and
claude
committed
df410ac
test(security): move extraction-guard suite to tests/extraction-guard [DEVA11Y-484]

maunilm
and
claude
committed
e850495
refactor(security): narrow PR to DEVA11Y-484's stated remediation only

maunilm
and
claude
committed
72091b9
Merge branch 'main' into fix/DEVA11Y-484-bsdtar-size-limit

maunilm
and
claude
committed
3a7d545
docs(security): drop comment references to the path #37 removed [DEVA11Y-484]

maunilm
and
claude
committed
f703901
fix(security): address review feedback — compressed cap + P3 hygiene [DEVA11Y-484]

maunilm
and
claude
committed
2c5fba8