Skip to content

1.8.33

Choose a tag to compare

@hansott hansott released this 10 Jul 12:35
Immutable release. Only release title and notes can be modified.
c99ab9a
  • Fix a caching bug that could cause path traversal detection to miss attacks in the request body
  • Detect path traversal attacks that use encoded dots, like %2e%2e
  • Detect attacks hidden behind multiple layers of URL encoding
  • Protect fetch() calls against SSRF when a custom undici dispatcher is passed in
  • Detect path traversal in http.request()/https.request() calls that use a Unix socket path