fix(security): detect indirect asyncio.to_thread Gunicorn worker bypasses - #261

Merged

AlexanderWagnerDev merged 12 commits into

mainfrom

cursor/application-security-review-7758

Sep 21, 2026

Commits on Sep 21, 2026

fix(security): detect indirect asyncio.to_thread Gunicorn worker mutations

cursoragent
and
AlexanderWagnerDev
committed
c7187ec
fix: address Codex asyncio worker scan findings
AlexanderWagnerDev
committed
5037af8
refactor: reduce async binding scan complexity
AlexanderWagnerDev
committed
5f656a5
fix: address remaining Codex asyncio scan findings
AlexanderWagnerDev
committed
33f699f
test: cover remaining Codex asyncio findings
AlexanderWagnerDev
committed
38102c6
fix: scan Runner aliases and loop else blocks
AlexanderWagnerDev
committed
ebcd2dc
fix: track local shadows and asyncio consumers
AlexanderWagnerDev
committed
14b5f01
fix: preserve same-line asyncio binding order
AlexanderWagnerDev
committed
6deb3a9
test: cover latest Codex asyncio edge cases
AlexanderWagnerDev
committed
3094bfd
fix: normalize asyncio AST references for import lookup
AlexanderWagnerDev
committed
25a1ae0
refactor: address Sonar asyncio maintainability findings
AlexanderWagnerDev
committed
4b7c539
refactor: merge remaining Sonar branches
AlexanderWagnerDev
committed
7ca91bc