Mauricio Siu 47347ab885 fix(security): escape user input in git clone commands across all providers ...

User-controlled git fields (customGitUrl, branch names, repo owner/name,
gitlab namespace, SSH hostname) were interpolated unescaped into git clone /
ssh-keyscan shell commands run via execAsync / execAsyncRemote, allowing
authenticated OS command injection. All such values are now passed through
shell-quote before interpolation (defense at the sink, covering every code
path including the compose branch bypass).

Closes GHSA-qxcw-cx35-2hrw, GHSA-hrfh-82jj-3q46, GHSA-6693-xv3f-69px,
GHSA-qwwm-hc7m-7xp9, GHSA-grrj-6xrh-j6vp, GHSA-x2p2-qq8g-2mqq,
GHSA-cg8g-x23v-5fw8

2026-07-19 20:32:15 -06:00

..

scripts

fix(server): update build paths

2024-10-26 15:48:30 -06:00

src

fix(security): escape user input in git clone commands across all providers

2026-07-19 20:32:15 -06:00

auth-schema2.ts

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

auth-schema.ts

Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.

2025-11-08 13:54:32 -06:00

esbuild.config.ts

Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.

2025-08-16 20:18:08 -06:00

package.json

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

tsconfig.json

chore(dependencies): update ai-sdk packages and other dependencies

2026-02-16 12:50:34 -06:00

tsconfig.server.json

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

tsconfig.server.no-decl.json

[autofix.ci] apply automated fixes

2026-02-16 18:51:10 +00:00