Skip to content

fix(core): block $VAR and ${VAR} variable expansion bypass (GHSA-wpqr-6v78-jr5g)#28403

Open
thalha-a9 wants to merge 7 commits into
google-gemini:mainfrom
thalha-a9:fix/variable-expansion-bypass
Open

fix(core): block $VAR and ${VAR} variable expansion bypass (GHSA-wpqr-6v78-jr5g)#28403
thalha-a9 wants to merge 7 commits into
google-gemini:mainfrom
thalha-a9:fix/variable-expansion-bypass

Commits

Commits on Jul 15, 2026