mirror of https://github.com/trailofbits/buttercup synced 2026-06-21 14:11:39 +00:00

Files

T

History

Henrik Brodin a20170e6c6 build(deps): bump langchain-core and cryptography for security fixes (#502 )

Upgrade langchain-core ~=1.2.22 (resolves to 1.2.23) to fix high-severity
path traversal in legacy load_prompt functions (GHSA dependabot alerts).
Upgrade cryptography to 46.0.6 to fix low-severity incomplete DNS name
constraint enforcement.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-30 09:34:17 +02:00

src/buttercup/fuzzer_runner

fix: apply ruff import sorting fixes to all source files

2026-01-26 15:17:12 +01:00

tests

Fix fuzzer-runner missing transitive dependency and add tests (#459 )

2026-01-27 23:13:53 +01:00

.gitignore

fuzzer_runner: split fuzzer's dependencies (#320 )

2025-09-10 09:52:08 +02:00

pyproject.toml

Fix fuzzer-runner missing transitive dependency and add tests (#459 )

2026-01-27 23:13:53 +01:00

README.md

fuzzer_runner: split fuzzer's dependencies (#320 )

2025-09-10 09:52:08 +02:00

runner.sh

fix: apply shellcheck and shfmt fixes to all shell scripts

2026-01-26 11:13:16 +01:00

uv.lock

build(deps): bump langchain-core and cryptography for security fixes (#502 )

2026-03-30 09:34:17 +02:00

README.md

Fuzzer Runner

A libfuzzer-based fuzzer runner that can be used as a command-line tool. It is useful to separate the clusterfuzz dependency (and its older indirect dependencies like protobuf==3.20) from the rest of the system.

Features

Run fuzzers with various engines and sanitizers
Merge corpus files