Repository navigation

Release v1.0.1

github-actions released this 01 Apr 20:12

· 4 commits to main since this release

b511ac0

Security

Upgraded google.golang.org/grpc from v1.79.2 to v1.79.3 — fixes an authorization bypass via missing leading slash in the HTTP/2 :path pseudo-header (CVSS 9.1, Critical)
Upgraded github.com/ClickHouse/clickhouse-go/v2 from v2.26.0 to v2.44.0 and github.com/ClickHouse/ch-go from v0.61.5 to v0.71.0 — fixes a query smuggling vulnerability where large uncompressed malicious external data could be used to inject a query packet into the connection stream (CVE-2025-1386, CVSS 5.9, Moderate)

Fixed

License badge in README now correctly shows BSD-3-Clause (was incorrectly showing MIT)

Assets 7