T3MP3ST v1 — hardened launch (AGPL, verify-claims 24/24, leak-scrubbed)

bench/cve-zero/samples/GHSA-72f5-rr8c-r6gr/ground-truth.json

@@ -0,0 +1 @@
+{"ghsa": "GHSA-72f5-rr8c-r6gr", "repo": "fluent/fluentd", "cwes": ["CWE-918"], "summary": "out_http: restrict placeholder-derived endpoint hosts to an allowed_hosts list (SSRF)", "fix_commit": "e175c1850980dc87d37add2026314924b2b51f29", "parent_commit": "6c88e14e120316b9e83e29bc6d716b4313425004", "vuln_files": ["lib/fluent/plugin/out_http.rb"], "vuln_lines": {"lib/fluent/plugin/out_http.rb": [60, 148, 281]}, "source_files": 93, "scope_dirs": ["lib/fluent/plugin"], "source_note": "Subset: only the lib/fluent/plugin package (containing the vuln file) was copied into source/, not the full repo."}