Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

oven-sh / bun Public

Notifications You must be signed in to change notification settings
Fork 4.7k
Star 93.1k

Code
Issues 5k+
Pull requests 2k
Discussions
Actions
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Security and quality
Insights

Hardening: input validation and bounds tightening across 31 subsystems (round 3)#31221

Merged

Jarred-Sumner merged 104 commits into

mainoven-sh/bun:mainfrom

claude/hardening-sweep-3oven-sh/bun:claude/hardening-sweep-3Copy head branch name to clipboard

May 24, 2026

Conversation Commits104 (104)Checks Files changed

Merged

Hardening: input validation and bounds tightening across 31 subsystems (round 3)#31221
Jarred-Sumner merged 104 commits into
mainfrom
claude/hardening-sweep-3

Commits

Commits on May 23, 2026

install: tighten dependency folder name validation
Jarred-Sumner
committed
mysql: tighten handshake packet handling
Jarred-Sumner
committed
router: fix decoded path buffer ownership
Jarred-Sumner
committed
structuredClone: bound constant pool index handling
Jarred-Sumner
committed
install: align migration skip predicates
Jarred-Sumner
committed
node:http: tighten server socket receiver checks
Jarred-Sumner
committed
serve: fix ref accounting in deferred response path
Jarred-Sumner
committed
node:http: tighten parser execute handling
Jarred-Sumner
committed
node:crypto: tighten cipher option handling
Jarred-Sumner
committed
formdata: tighten header value parsing
Jarred-Sumner
committed
install: copy manifest name before enqueue
Jarred-Sumner
committed
install: validate binary lockfile patch entries
Jarred-Sumner
committed
fetch: tighten proxy response handling
Jarred-Sumner
committed
node:zlib: validate write state array length
Jarred-Sumner
committed
shell: track interpolated value ranges in parser
Jarred-Sumner
committed
sql: validate transaction option strings
Jarred-Sumner
committed
node:fs: pin read buffers for async operations
Jarred-Sumner
committed
node:http: reorder buffered write conversion
Jarred-Sumner
committed
uws: stop parsing when data handler invalidates socket
Jarred-Sumner
committed
node:fs: snapshot vector buffers before deriving pointers
Jarred-Sumner
committed
streams: re-derive pending view before copy
Jarred-Sumner
committed
sql: tighten array type name validation
Jarred-Sumner
committed
sqlite: revalidate statement around bind callbacks
Jarred-Sumner
committed
sourcemap: bound vlq decode loop
Jarred-Sumner
committed
fetch: tighten content-length parsing
Jarred-Sumner
committed
url: bound query string parameter count
Jarred-Sumner
committed
install: require integrity for off-registry lockfile entries
Jarred-Sumner
committed
postgres: reject malformed array literals
Jarred-Sumner
committed
node:zlib: hold write buffers across async work
Jarred-Sumner
committed
timers: clean up promoted timer map entries
Jarred-Sumner
committed
serve: cap streamed request body size
Jarred-Sumner
committed
install: tighten symlink target normalization
Jarred-Sumner
committed
resolver: validate export wildcard segments
Jarred-Sumner
committed
mysql: bound packet payload length
Jarred-Sumner
committed
mysql: distinguish null marker from length prefix
Jarred-Sumner
committed
blob: copy typed array parts during construction
Jarred-Sumner
committed
http2: pass full name buffer to header validation
Jarred-Sumner
committed
http2: bound headers frame padding
Jarred-Sumner
committed
shell: terminate seq loop on non-advancing increment
Jarred-Sumner
committed
tls: enforce renegotiation rate policy
Jarred-Sumner
committed
fetch: include host override in connection pool key
Jarred-Sumner
committed
strings: compare bytes in hashed string equality
Jarred-Sumner
committed
strings: avoid narrowing utf16 length conversion
Jarred-Sumner
committed
node:crypto: reject unconvertible signature encodings
Jarred-Sumner
committed
node:vm: tighten module receiver checks
Jarred-Sumner
committed
fetch: reset host override on cross-origin redirect
Jarred-Sumner
committed
dns: compare hostnames in cache lookup
Jarred-Sumner
committed
fs.watch: scope watcher manager to calling vm
Jarred-Sumner
committed
spawn: clear aliased buffer before source detach
Jarred-Sumner
committed
glob: bound multi-byte literal comparison
Jarred-Sumner
committed
mysql: validate temporal value ranges
Jarred-Sumner
committed
http2: validate response header values
Jarred-Sumner
committed
shell: open directories without following links during rm
Jarred-Sumner
committed
structuredClone: validate view backing store tag
Jarred-Sumner
committed
websocket: enforce max payload on decompression fast path
Jarred-Sumner
committed
node:fs: pin read buffers for async operations (extern decl consistency)
Jarred-Sumner
committed
[autofix.ci] apply automated fixes

autofix-ci[bot]
authored and
Jarred-Sumner
committed
test: add regression coverage for input validation changes
Jarred-Sumner
committed
node:http: surface unframeable responses as parse errors
Jarred-Sumner
committed
blob: only copy typed array parts when a later part can run user code
Jarred-Sumner
committed
blob: also force part cloning while other entries remain to be walked
Jarred-Sumner
committed
fetch: handle proxy CONNECT responses consistently across redirect modes
Jarred-Sumner
committed
install: align validation helpers across lockfile read/write paths
Jarred-Sumner
committed
node:zlib: validate the writeResult argument type in init
Jarred-Sumner
committed
url: bound the query-string pre-scan at the parameter cap
Jarred-Sumner
committed
server: count pre-stream buffered bytes against the request body limit
Jarred-Sumner
committed
fs.watch: free a displaced watcher manager on Windows
Jarred-Sumner
committed
sql: accept spaces inside array type modifiers
Jarred-Sumner
committed
test: tighten assertions and follow string-building conventions
Jarred-Sumner
committed
[autofix.ci] apply automated fixes

autofix-ci[bot]
authored and
Jarred-Sumner
committed
formdata: release the duplicated part content type after appending
Jarred-Sumner
committed
install: tighten folder name validation in the isolated linker
Jarred-Sumner
committed
node:http: tighten parser execution state handling
Jarred-Sumner
committed
sql: bound outgoing packet framing
Jarred-Sumner
committed
tls: bound peer-initiated renegotiation handling
Jarred-Sumner
committed
node:wasi: tighten path resolution against the preopened directory
Jarred-Sumner
committed
blob: tighten part buffer lifetime handling
Jarred-Sumner
committed
[autofix.ci] apply automated fixes

autofix-ci[bot]
authored and
Jarred-Sumner
committed
tls: keep the safety comment adjacent to the renegotiate call
Jarred-Sumner
committed
node:zlib: validate remaining typed array arguments in init
Jarred-Sumner
committed
fetch: defer host override reset until the redirected socket is released
Jarred-Sumner
committed
test: use Buffer.alloc for repetitive payloads in deflate limit test
Jarred-Sumner
committed
fetch: also drop the host override on multiplexed cross-origin redirects
Jarred-Sumner
committed
node:fs: root collected vector elements for the duration of pointer derivation
Jarred-Sumner
committed
remove redundant comments
Jarred-Sumner
committed
fetch: distinguish content-length framing errors from malformed responses
Jarred-Sumner
committed
tls: reset the renegotiation count each window
Jarred-Sumner
committed
[autofix.ci] apply automated fixes

autofix-ci[bot]
authored and
Jarred-Sumner
committed
fetch: also ignore transfer-encoding on a successful connect response
Jarred-Sumner
committed
wasi: walk up on any path resolution failure during the containment check
Jarred-Sumner
committed
test: surface subprocess stderr in the remaining spawn assertions
Jarred-Sumner
committed
node: hold async I/O buffers in cached values instead of handles
Jarred-Sumner
committed
jsc: add ArrayBuffer::unpin and release async buffers on completion
Jarred-Sumner
committed
node:fs: gate vectored buffer arrays on the array structure, not its storage shape
Jarred-Sumner
committed
sqlite: always copy string parameters when binding
Jarred-Sumner
committed
test: assert zlib write buffers are transferable after completion
Jarred-Sumner
committed
node:fs: hold vectored I/O buffers for the duration of an async write
Jarred-Sumner
committed
node:fs: balance the exception check and buffer release on error paths
Jarred-Sumner
committed
test: assert empty stderr in two more subprocess tests
Jarred-Sumner
committed
test: assert empty stderr in the last two unchecked subprocess spawns
Jarred-Sumner
committed
formdata: accept HTAB inside part header values
Jarred-Sumner
committed
[autofix.ci] apply automated fixes
autofix-ci[bot]
authored
zlib: surface buffer materialization failure as an error
Jarred-Sumner
committed
test: build the oversized header name without String.repeat
Jarred-Sumner
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.