Skip to content

Ideon v0.9.5

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Jul 16:32
v0.9.5
This tag was signed with the committer’s verified signature.
3xpyth0n 3xpyth0n
GPG key ID: B0F5A1162A6C9E9D
Verified
Learn about vigilant mode.
5e420c3
This commit was signed with the committer’s verified signature.
3xpyth0n 3xpyth0n
GPG key ID: B0F5A1162A6C9E9D
Verified
Learn about vigilant mode.

Security

  • Fixed an unauthenticated SSRF relay (GHSA-vpc2-r395-534p) where the /api/links/preview endpoint accepted requests without a valid session, allowing anyone to use the server as an anonymous outbound HTTP relay. The endpoint now requires authentication. Additionally, closed a gap in the SSRF blocklist where 0.0.0.0 (and IPv6 :: / ::0) was not blocked — on Linux these addresses route to the loopback interface at the kernel level. Reported by @de3erve.
Assets 3
Loading