Fix for GHSA-4xgf-cpjx-pc3j#186

Closed

keycard-gh-workflows-access[bot] wants to merge 1 commit into

mainfrom

socket/fix/GHSA-4xgf-cpjx-pc3j

Commits on Jun 22, 2026

fix: GHSA-4xgf-cpjx-pc3j - pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size
github-actions[bot]
committed