run-llama / llama-agents / 42178214779
85%

DEFAULT BRANCH: main
Ran
Jobs 12
Files 235
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.173% (-0.004%) from 85.177%
42178214779

push

github

web-flow 
Update dependency copier to v9.15.2 [SECURITY] (#871)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [copier](https://redirect.github.com/copier-org/copier) | `9.14.1` →
`9.15.2` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/copier/9.15.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/copier/9.14.1/9.15.2?slim=true)
|

---

### Copier has a trust-prefix bypass via path traversal that runs tasks
unprompted
[CVE-2026-53951](https://nvd.nist.gov/vuln/detail/CVE-2026-53951) /
[GHSA-9gmc-jqmh-3rvm](https://redirect.github.com/advisories/GHSA-9gmc-jqmh-3rvm)

<details>
<summary>More information</summary>

#### Details
##### Copier: trust-prefix bypass via path traversal runs tasks
unprompted

##### Summary

In copier `>= 9.5.0, <= 9.15.1`, the `trust` setting's prefix match
(`copier/_settings.py`) compares the template URL against a trusted
prefix with
a raw `str.startswith` and **no path normalization**, while the URL *is*
normalized when the template is actually fetched (`Path.resolve()` for
local
paths; libcurl dot-segment removal for `https`). A template reference
that
textually starts with a trusted prefix but contains `..`
(e.g. `https://github.com/trusted-org/../attacker-org/repo.git`) is
therefore
granted trust yet resolves to a different, attacker-controlled template,
whose
`tasks` / `migrations` / `jinja_extensions` then run **without the
`--trust`
prompt** — arbitrary command execution. Likely **CWE-22 (Improper
Limitation of
a Pathname)** in the trust check leading to **CWE-94 (code execution)**.

##### Details

`trust` lets users mark template locations as trusted so copier skips
the
unsafe-feature gate. A trailing `/` makes an entry a **prefix** match
(`docs/settings.md`: *"Locations ending with `/` will be matched as
prefixes,
trusting all tem... (continued)

18962 of 22263 relevant lines covered (85.17%)

1.15 hits per line

Coverage Regressions

Lines Coverage ∆ File
1
94.53
-0.78% packages/llama-agents-control-plane/src/llama_agents/control_plane/code_repo/git_server.py
Jobs
ID Job ID Ran Files Coverage
1 llama-agents-dev - 42178214779.1 12
76.5
GitHub Action Run
2 llamactl - 42178214779.2 48
79.79
GitHub Action Run
3 llama-index-workflows - 42178214779.3 53
94.18
GitHub Action Run
4 llama-agents-server - 42178214779.4 31
86.15
GitHub Action Run
5 llama-agents-core - 42178214779.5 15
81.34
GitHub Action Run
6 llama-agents-appserver - 42178214779.6 17
81.96
GitHub Action Run
7 llama-index-utils-workflow - 42178214779.7 1
70.84
GitHub Action Run
8 llama-agents-agentcore - 42178214779.8 5
70.22
GitHub Action Run
9 llama-agents-control-plane - 42178214779.9 31
74.57
GitHub Action Run
10 llama-agents-client - 42178214779.10 4
95.32
GitHub Action Run
11 llama-agents-integration-tests - 42178214779.11 102
64.93
GitHub Action Run
12 llama-agents-dbos - 42178214779.12 11
75.72
GitHub Action Run
Source Files on build 42178214779