🛡️ Sentinel: [CRITICAL] Fix SQL injection vulnerability in ERDModel - #397

Closed

seonghobae wants to merge 14 commits into

developmentalfrom

sentinel-erd-sql-injection-fix-12514938840344388166

Commits on Aug 5, 2026

🛡️ Sentinel: [CRITICAL] Fix SQL injection vulnerability in ERDModel
seonghobae
committed
0987743

Commits on Aug 6, 2026

test(security): reject SQL grammar smuggling
seonghobae
committed
656a082
test(security): cover validated input mutation bypass
seonghobae
committed
d4d0f57
fix(security): constrain DDL grammar and copy validated inputs
seonghobae
committed
43583b3
docs(security): record ERD DDL injection boundary
seonghobae
committed
a25daec
docs(changelog): record ERD DDL hardening
seonghobae
committed
93c01a2
🛡️ Sentinel: [HIGH] Fix js-yaml vulnerability (CVE-2026-59870)
seonghobae
committed
9104afc

Commits on Aug 7, 2026

test(security): reproduce ERD DDL review findings
seonghobae
committed
f72d23e
fix(erd): enforce validated DDL grammar
seonghobae
committed
a4b79d7
docs(erd): record DDL security boundary
seonghobae
committed
9f00cd1
docs(erd): document DDL injection boundary
seonghobae
committed
63a0431
docs(security): correct js-yaml advisory record
seonghobae
committed
547c238
ci(coverage): remove unrelated pnpm dependency drift
seonghobae
committed
aea355e
ci(coverage): restore trusted base pnpm lock
seonghobae
committed
df63dd4