fix(security): deep audit remediation — 5 high + 6 medium findings - #22

Open

ARHAEEM wants to merge 6 commits into

mainfrom

fix/security-deps-and-audit

Commits on Jul 31, 2026

fix(deps): bump undici past TLS certificate-validation bypass

ARHAEEM
and
claude
committed
fix(security): row-template path traversal + formatter data corruption

ARHAEEM
and
claude
committed
fix(security): tunnel revocation, read-only mislabel, config truncation

ARHAEEM
and
claude
committed
fix(sync,daemon,lsp): prune data-loss guards, force-kill identity, quadratic diagnostics

ARHAEEM
and
claude
committed
refactor(tools): move download_* to a new local-write category

ARHAEEM
and
claude
committed
fix: sweep audit low-severity findings

ARHAEEM
and
claude
committed