public/steve
6
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Harden decoding and patch dependencies #15

Closed
vkobel wants to merge 0 commits from feat/steve-v2-parsing-hardening into main
pull from: feat/steve-v2-parsing-hardening
merge into: public:main
Conversation 2 Commits - Files changed -
vkobel commented 2026-08-27 11:40:55 +00:00 (Migrated from codeberg.org)
Copy link
  • Enforce existing browser and native decoding rules.
  • Reject malformed attestation, expiry, base64url, and error fields.
  • Update only the targeted vulnerable dependencies.
  • No wire-format or public API changes.
  • Full release, X25519/X-Wing E2E, and audit checks pass.
- Enforce existing browser and native decoding rules. - Reject malformed attestation, expiry, base64url, and error fields. - Update only the targeted vulnerable dependencies. - No wire-format or public API changes. - Full release, X25519/X-Wing E2E, and audit checks pass.
vkobel commented 2026-08-27 15:00:25 +00:00 (Migrated from codeberg.org)
Copy link

depends on https://codeberg.org/caution/platform/issues/447

depends on https://codeberg.org/caution/platform/issues/447
vkobel commented 2026-09-01 09:36:06 +00:00 (Migrated from codeberg.org)
Copy link

merged

merged

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
public/steve!15
No description provided.