fix(sync): block path traversal in storage-metadata write (GHSA-833q, 0.60.3) - #412

Merged

padak merged 2 commits into

mainfrom

fix/sync-storage-metadata-traversal

Jun 13, 2026

Commits on Jun 13, 2026

fix(sync): contain API-supplied bucket id + table name in storage metadata write (0.60.3)
padak
committed
1d5966f
test(sync): give the storage-traversal tests teeth (PR #412 review NIT-1)
padak
committed
07293c5