Fix SNMP MIB eval/shell injection, ZIP path traversal, and RPC pre-auth resource exhaustion - #21869

Open

prithvee07 wants to merge 3 commits into

rapid7:masterfrom

prithvee07:fix/security-scan-findings

Commits on Sep 3, 2026

Fix command injection and eval in SNMP MIB import (CWE-78, CWE-95)

prithvee07
and
claude
committed
5f92faf
Fix ZIP extraction path traversal via sibling-prefix bypass (CWE-22)

prithvee07
and
claude
committed
ee55602
Reject oversized RPC/HTTP request bodies before decoding (CWE-400)

prithvee07
and
claude
committed
8c02a94