fix(security): TTS output_path traversal + update ZIP symlink reject (salvage #6693 + #15881) - #32056

Merged

teknium1 merged 3 commits into

mainfrom

hermes/hermes-f9dd4507

May 25, 2026

Commits on May 25, 2026

fix(tts): reject '..' traversal in output_path

aaronlab
and
teknium1
committed
fd16332
fix(update): reject symlink members in update ZIP

codeblackhole1024
and
teknium1
committed
a66a69a
chore(release): map dsr-restyn + WuKongAI-CMU + codeblackhole1024 for S04 cluster
teknium1
committed
f4622aa