fix: run the binary directly in verify_binary instead of through a shell (CWE-78) - #43

Merged

07souravkunda merged 3 commits into

release_1.5.1from

locsec/WI-cf38e835

Sep 24, 2026

Commits on Aug 12, 2026

fix: run the binary directly in verify_binary instead of through a shell (CWE-78)
07souravkunda
committed
db623c3
chore: scope-limited scanner suppression on the fixed verify_binary line
07souravkunda
committed
ab48704
test: pin the array-form behaviour with a real binary at a hostile path
07souravkunda
committed
e766c21