Skip to content

v1.0.7 — Security Hardening & 39 Bug Fixes

Latest
Latest

Choose a tag to compare

View all tags
@4DvAnCeBoY 4DvAnCeBoY released this 06 Apr 16:30
v1.0.7
d53ad4d

v1.0.7 — Security Hardening & 39 Bug Fixes

Comprehensive security and reliability release driven by 3 independent full-codebase audits.

Highlights

  • 7 security fixes: Path traversal protection, PBKDF2 encryption, DNS rebinding protection
  • 10 concurrency fixes: Data races, goroutine leaks, lock ordering
  • 9 memory caps: All unbounded collections capped with oldest eviction
  • 7 MCP/REST API fixes: Correct routing for storage, clipboard, trace, batch
  • 80+ new tests (304 unit + 98 E2E), all passing with -race

Breaking Changes

State encryption KDF upgraded to PBKDF2 (100k rounds). Re-save state after upgrading.

Install

curl -sSL https://raw.githubusercontent.com/4DvAnCeBoY/testmu-browser-agent-public/main/install.sh | sh

See CHANGELOG.md for the complete list of 39 fixes.

Assets 7
Loading