T3MP3ST v1 — hardened launch (AGPL, verify-claims 24/24, leak-scrubbed)

bench/cve-zero/samples/GHSA-97vg-427p-8hx5/ground-truth.json

@@ -0,0 +1 @@
+{"ghsa": "GHSA-97vg-427p-8hx5", "repo": "surrealdb/surrealdb", "cwes": ["CWE-918"], "summary": "Fix HTTP redirect handling and DNS resolution filtering (#221)", "fix_commit": "ceb1ca3a10ea7789c990a5d797f3ebd725ae407f", "parent_commit": "8856ab3c9161f5fdd882f19e1c4a3e8ebff8cf96", "vuln_files": ["surrealdb/core/src/http/mod.rs", "surrealdb/core/src/http/resolve.rs"], "vuln_lines": {"surrealdb/core/src/http/mod.rs": [44, 68, 70, 71, 73, 74, 75, 78, 79], "surrealdb/core/src/http/resolve.rs": [10, 46, 47, 52]}, "source_files": 2, "scope_dirs": ["surrealdb/core/src/http"], "source_note": "Subset: only the surrealdb/core/src/http directory (containing the vuln files mod.rs and resolve.rs) was copied into source/, not the full surrealdb repo."}