Skip to content

VulnFuse v0.1.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Aug 04:46
· 8 commits to main since this release
v0.1.1
80e3c0c

VulnFuse v0.1.1 is the security-hardening release recommended for all CLI, library, browser, and GitHub Action users.

Security and correctness

  • Replaces trailing identifier punctuation cleanup with a linear scan, avoiding pathological regular-expression work on attacker-controlled report text.
  • Uses delimiter-aware Markdown code spans so component values containing backticks or backslashes cannot break the generated report structure.
  • Keeps CodeQL focused on authored TypeScript while dependency audit and bundle-drift CI continue to verify the committed Action bundle.
  • Adds regression coverage for the hardened identifier and Markdown paths.

Distribution and maintenance

  • Adds a verified command for installing the paired CLI and core packages directly from this GitHub release.
  • Defers incompatible TypeScript major updates while continuing minor and patch updates.
  • Ships the CLI, reusable core, Node 24 Action archive, CycloneDX SBOM, and SHA-256 checksums.

Use the hosted workbench, follow the CLI and Action quick start, or read the v0.1.1 changelog.

Full comparison: v0.1.0...v0.1.1

Assets 7
Loading