mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-07-21 22:05:23 +02:00
drizzle-zod exposed appName (notNull + $defaultFn) as optional in the insert schema, letting callers override it; it then flowed unquoted into rm -rf/mkdir paths. Omit appName from createScheduleSchema and quote() the schedule fullPath sinks (completes GHSA-fgh8 VULN-015 alongside the mount/patch fixes).