zeekay
ffe73447a3
security: fix 3 HIGH + 3 MEDIUM findings from red team review
...
- H-1: guard negative abs_off in obj_bytes() (buffer read bypass)
- H-2: remove CERT_NONE from ZapClient TLS (MITM protection)
- H-3: add MAX_MESSAGE_SIZE check in ZapServer (OOM DoS)
- M-5: log exceptions instead of bare pass in server
- L-1: validate ZAP version in Message.parse()
- L-2: wrap req_id at u32 boundary in CloudClient
2026-03-31 20:57:16 -07:00
..
2026-03-13 16:52:56 -07:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-09 21:11:54 -07:00
2026-03-13 16:52:56 -07:00
2026-03-01 16:01:16 -08:00
2026-03-25 04:02:13 -07:00
2026-03-06 03:13:54 -08:00
2026-03-23 10:26:07 -07:00
2026-03-31 20:57:16 -07:00
2026-03-24 18:41:29 -07:00
2026-03-07 00:01:43 -08:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-13 16:52:56 -07:00
2026-03-19 10:29:31 -07:00
2026-03-12 01:12:30 -07:00
2026-03-06 23:44:10 -08:00
2026-03-22 20:03:09 -07:00
2026-03-04 12:15:14 -08:00
2026-03-04 12:15:14 -08:00
2026-03-10 10:38:31 -07:00
2026-03-12 01:12:30 -07:00
2026-03-04 12:15:14 -08:00
2026-03-09 20:50:55 -07:00
2026-03-10 21:57:50 -07:00
2026-03-12 01:40:46 -07:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-10 21:57:50 -07:00
2026-03-04 12:15:14 -08:00
2026-03-01 16:01:16 -08:00
2026-03-04 12:15:14 -08:00
2026-03-01 16:01:16 -08:00
2026-03-04 12:15:14 -08:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-12 01:12:30 -07:00
2026-03-04 12:15:14 -08:00
2026-03-12 01:12:30 -07:00
2026-03-13 16:52:56 -07:00
2026-03-12 01:12:30 -07:00
2026-03-10 21:57:50 -07:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-13 16:52:55 -07:00
2026-03-04 12:15:14 -08:00
2026-03-09 17:49:54 -07:00
2026-03-10 21:57:50 -07:00
2026-03-27 20:00:21 -07:00
2026-03-12 01:12:30 -07:00
2026-03-01 16:01:16 -08:00
2026-03-01 16:01:16 -08:00
2026-03-31 20:57:16 -07:00
2026-03-31 20:57:16 -07:00