cc64d126be
The /generate and /generate-operations endpoints accepted num_exercises without an upper bound, allowing DoS via excessively large values. Add Field(le=100) to both ExerciseRequest and OperationExerciseRequest Pydantic models to cap exercises at 100. Fixes vuln-0001