Skip to content

Remediate security issues#16

Draft
trottomv wants to merge 1 commit into
mainfrom
security-remediations
Draft

Remediate security issues#16
trottomv wants to merge 1 commit into
mainfrom
security-remediations

Conversation

@trottomv

@trottomv trottomv commented Sep 4, 2025

Copy link
Copy Markdown
Owner
  • Upgrade to jinja2~=3.1.0
  • Remove hardcoded secrets using os.getenv
  • Add timeout handler to requests
  • Security hardening of Dockerfile
  • Fix SSTI vulnerability on jinja2 template rendering
  • Turn on coraza waf

@trottomv trottomv self-assigned this Sep 4, 2025
@trottomv trottomv force-pushed the security-remediations branch 2 times, most recently from 9967050 to 76fb0a0 Compare September 4, 2025 15:19
@trottomv trottomv force-pushed the security-remediations branch 2 times, most recently from 12b8790 to 2748d5c Compare November 2, 2025 07:38
@trottomv trottomv force-pushed the security-remediations branch from 2748d5c to 9188789 Compare November 2, 2025 11:17
@trottomv trottomv force-pushed the security-remediations branch 2 times, most recently from 0f2fdde to ed5668f Compare April 25, 2026 06:16
- Upgrade to jinja2~=3.1.0
- Remove hardcoded secrets using os.getenv
- Add timeout handler to requests
- Security hardening of Dockerfile
- Fix SSTI vulnerability on jinja2 template rendering
- Turn on coraza waf
@trottomv trottomv force-pushed the security-remediations branch from ed5668f to ee8c215 Compare May 25, 2026 13:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant