Fix embedded Python StringPrep with one upstream backport - #529

Merged

LouisLotter merged 7 commits into

stackstate-7.78.2from

cve/python-15806-scan35310940870

Sep 18, 2026

Commits on Sep 18, 2026

fix(python): backport credential, tar extraction and POP3 security fixes
stackstate-ci
committed
b00943d
fix(python): include supported StringPrep security backport
stackstate-ci
committed
1203ae2
fix(python): backport ZIP bounds and tar link filter corrections
stackstate-ci
committed
d258823
fix(build): validate Bazel Python inputs across omnibus cache restores
stackstate-ci
committed
cdcc37c
Limit Python security backports to reachable StringPrep defect
LouisLotter
committed
a14cde7
Merge remote-tracking branch 'origin/stackstate-7.78.2' into python-vex-minimal
LouisLotter
committed
256e029
Preserve image-scoped VEX matching for local agent scans
LouisLotter
committed
9f51215