Michael Stepankin

Hey! I think you can add a lot of PoCs from https://securitylab.github.com/advisories/

Consider updating fastjson version to 2.0.60 to prevent a number of high severity vulnerabilites. Vulnerability details have been shared with maintainers over email.

Consider updating fastjson version to 2.0.60 to prevent a number of high severity vulnerabilites. Vulnerability details have been shared with maintainers over email.

…24-282) - Upgrade FastJSON from 1.2.68 to 2.0.60 for enhanced security - Remove dangerous ParserConfig.setAutoTypeSupport(true) calls - Eliminate deserialization of untrusted data vulnerability - Maintain backward compatibility using com.alibaba.fastjson imports...

Fix GHSL-2025-035: Prevent command injection in S3 model downloading - Validate S3 path format to block special characters - Replace Runtime.exec() with ProcessBuilder to prevent shell injection - Blocks --endpoint-url...

- Enable Consul ACL with token-based authentication - Use CONSUL_INITIAL_MANAGEMENT_TOKEN environment variable (default: CHANGE-ME-IN-PRODUCTION) - Configure Spring Cloud Consul client to use ACL token - All unauthorized Consul API requests...

Hi, we need to address the PR with tag: 12345678

Copilot test 2

2

We need to add some additional payload, but I dont remember who suggested them earlier.