docs(security): add CWE-22 regression fix + 2026-05-13 changelog #31

Open
documentation-specialist wants to merge 2 commits from docs/cwe22-org-import-path-traversal-fix into main

2 Commits

Author SHA1 Message Date
documentation-specialist 027c4ffc27 docs(security/changelog): remove CWE-22 entry — already covered by docs#49
Secret scan / secret-scan (pull_request) Successful in 17s
CI / build (pull_request) Failing after 6m41s
The CWE-22 path traversal regression entry is authoritatively covered in
docs#49's security/changelog.md. Removes the duplicate from this PR.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-16 13:42:17 +00:00
documentation-specialist 6265ce5ec1 docs(security): add CWE-22 regression fix entry for 2026-05-13
Secret scan / secret-scan (pull_request) Successful in 26s
CI / build (pull_request) Successful in 3m2s
Pairs molecule-core#810 (Critical CWE-22 path traversal regression in
org_import.go). Also adds full 2026-05-13 changelog entry covering:
- CWE-22 path traversal fix (security section)
- stop_event graceful shutdown feature (SDK Python #8)
- PLATFORM_URL default alignment (workspace-runtime #12)
- Canvas CI hardening (core #773/776/777)
- Go lint CI hardening (core #781)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-13 08:23:48 +00:00