fix: resolve relative paths against allowed directories instead of process.cwd() #2609
+54
−7
GitHub Advanced Security / CodeQL
succeeded
Feb 8, 2026 in 2s
No new alerts in code changed by this pull request
Loading