Defined in 2 files
Last patched
sanitize_params in OpenC3/cosmos was changed by 3 published CVE fixes between 2024 and 2025, in 6 distinct patches that added or removed 90 lines in total.
The name occurs in 2 files: openc3-cosmos-script-runner-api/app/controllers/application_controller.rb, openc3-cosmos-cmd-tlm-api/app/controllers/application_controller.rb.
OpenC3/cosmos has 15 CVEs with a located fix in total, so 20% of them touched this function.
Every published CVE whose fix changed sanitize_params, newest first, with the lines each fix touched.
CVE-2025-28382 · openc3-cosmos-cmd-tlm-api/app/controllers/application_controller.rb · lines 60–83 · +8 −2 in 4 hunks
CVE-2025-28384 · openc3-cosmos-cmd-tlm-api/app/controllers/application_controller.rb · lines 60–83 · +4 −1 in 2 hunks
CVE-2025-28382 · openc3-cosmos-script-runner-api/app/controllers/application_controller.rb · lines 71–94 · +8 −2 in 4 hunks
CVE-2025-28384 · openc3-cosmos-script-runner-api/app/controllers/application_controller.rb · lines 71–94 · +4 −1 in 2 hunks
CVE-2024-46977 · openc3-cosmos-cmd-tlm-api/app/controllers/application_controller.rb · lines 60–89 · +30 −0
CVE-2024-46977 · openc3-cosmos-script-runner-api/app/controllers/application_controller.rb · lines 70–99 · +30 −0
Get an alert when the next CVE fix lands in OpenC3/cosmos, with the patched functions.
Monitor cosmos CVEsFunctions in the same files that CVE fixes also changed.
Functions in OpenC3/cosmos changed by the most CVE fixes.
Common questions about CVE fixes to sanitize_params.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
