Validate user_id to prevent path traversal in python file upload (#3104)
fix(security): validate user_id to prevent path traversal in python file upload (#3104) (#3184)
Validate user_id to prevent path traversal in python file upload (#3104)e0c741-fix-validate-user-id-to-prevent-path-cve-2026-73034fixvalidate user prevent path traversal python
Committed by mumubuku
commit message
fix(security): validate user_id to prevent path traversal in python file upload (#3104) (#3184)
Co-authored-by: mumubuku <[email protected]>Editor assessment
This commit patches CVE-2026-73034. The subject is purposeful: it names the missing check and the concrete threat, path traversal in python file upload, so the reader knows both the defect and the attack. Type and scope read correctly for a security-driven fix. The only body content is a co-author trailer, which is metadata rather than rationale, so nothing explains how user_id was trusted or what the new validation permits. Two PR references stacked in the header add noise and length. Sound, self-explanatory headline; thin on reasoning.