Skip to content

fix(security): refuse to follow symlinks that escape the project root in MCP source-returning reads#349

Open
casanel-net wants to merge 1 commit into
colbymchenry:mainfrom
casanel-net:fix/security/mcp-read-realpath-symlink-escape
Open

fix(security): refuse to follow symlinks that escape the project root in MCP source-returning reads#349
casanel-net wants to merge 1 commit into
colbymchenry:mainfrom
casanel-net:fix/security/mcp-read-realpath-symlink-escape

Commits

Commits on May 23, 2026