strix/scripts
alex s dfdbe4b2ab
fix(image): patch brotli decoder (CVE-2026-111497) in sandbox, bump tag 1.3.0 -> 1.3.1 (#1617)
kali-rolling still ships libbrotli 1.2.0-4; node, curl and python3 in the
sandbox all load the shared libbrotlidec, so a malicious Content-Encoding: br
response would hit the vulnerable decoder. Install Debian's fixed 1.2.0-4.1
packages over Kali's and fail the build if the version is not applied.
2026-10-28 19:58:04 -04:00
..
build.sh feat(tui): replace Textual with a Go/Bubble Tea interface (#941) 2026-08-03 19:23:07 -07:00
docker.sh feat: Migrate from Poetry to uv (#379) 2026-03-31 17:20:41 -07:00
install.sh fix(image): patch brotli decoder (CVE-2026-111497) in sandbox, bump tag 1.3.0 -> 1.3.1 (#1617) 2026-10-28 19:58:04 -04:00
tui_sidecar_hook.py fix(build): keep the TUI sidecar hook importable on hatchling 1.32.1 (#1325) 2026-09-16 14:25:38 -04:00