zeekay
ffe73447a3
security: fix 3 HIGH + 3 MEDIUM findings from red team review
...
- H-1: guard negative abs_off in obj_bytes() (buffer read bypass)
- H-2: remove CERT_NONE from ZapClient TLS (MITM protection)
- H-3: add MAX_MESSAGE_SIZE check in ZapServer (OOM DoS)
- M-5: log exceptions instead of bare pass in server
- L-1: validate ZAP version in Message.parse()
- L-2: wrap req_id at u32 boundary in CloudClient
2026-03-31 20:57:16 -07:00
..
2026-03-24 18:41:29 -07:00
2026-03-12 01:12:30 -07:00
2026-03-25 01:52:18 -07:00
2025-12-26 04:31:06 -08:00
2026-01-21 21:45:43 -08:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2025-03-15 03:31:14 +00:00
2025-09-05 18:26:03 -05:00
2025-12-26 04:31:06 -08:00
2026-03-31 20:57:16 -07:00
2026-03-24 18:41:29 -07:00
2026-03-31 20:57:16 -07:00
2025-03-15 03:56:11 +00:00
2025-12-26 04:31:06 -08:00
2025-12-09 09:14:34 -08:00
2025-08-12 16:19:34 -05:00
2025-12-26 04:31:06 -08:00
2026-03-09 21:10:37 -07:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2026-03-31 20:57:16 -07:00
2025-12-09 16:04:55 -08:00
2025-09-17 02:55:28 +00:00
2025-12-26 04:31:06 -08:00
2025-09-17 02:55:28 +00:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2026-03-31 20:57:16 -07:00
2025-12-09 16:04:55 -08:00
2026-03-31 20:57:16 -07:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00
2025-12-26 04:31:06 -08:00