PT-2026-91235

Description A submitted topology carries two lists of blobstore keys, dependency jars and dependency artifacts, which the client fills in after uploading the corresponding blobs. Nimbus performed no validation of their contents on the submission path, yet acts on them in two places. During cleanu...