fix: resolve sudo and findmnt from trusted dirs to prevent PATH injection - #70

Open

leongdl wants to merge 13 commits into

aws-deadline:mainlinefrom

leongdl:fix/path-injection-rce

Commits on Aug 17, 2026

fix: resolve sudo and findmnt from trusted dirs, not PATH
leongdl
committed
42eea6f
fix: address CI failures and review findings on the trusted-path resolver
leongdl
committed
16c62d2
fix: use nested with statements for Python 3.8 compatibility
leongdl
committed
433ab52
fix: repair Windows 3.13 assertion, hollow fixture, and added public API
leongdl
committed
d0a1617
docs: Reframe resolver comments around problem and solution
leongdl
committed
99c1011
fix: raise the error type callers of the VFS mount paths already handle
leongdl
committed
9cdd7e8
docs: State that VFS binary discovery is out of scope for the resolver
leongdl
committed
4d82305
fix: alias the exception import so it stays out of the public API
leongdl
committed
e11eed5

Commits on Aug 18, 2026