v1.2.2 - Security update
Routine security check, no severe fix in this release.
Disclosure: AI was used to finalize these very simple fixes (Aikido security service & Claude Opus 4.6)
Docker images
What's Changed
- [Aikido] AI Fix for 3rd party Github Actions should be pinned by @aikido-autofix[bot] in #419
- Dependencies updates (dependabot auto updates)
- [Aikido] Fix security issue in fast-xml-parser via minor version upgrade from 5.3.5 to 5.3.7 by @aikido-autofix[bot] in #416
- [Aikido] AI Fix for HTTP request might enable SSRF attack by @aikido-autofix[bot] in #418
- [Aikido] AI Fix for Docker container runs as default root user by @aikido-autofix[bot] in #417
Addressed Vulnerabilities
- fast-xml-parser 5.3.5 → 5.3.7 — fixes CVE-2026-26278 (GHSA-jmr7-xgp7-cmfj, HIGH) — DoS via entity expansion in DOCTYPE (no expansion limit).
Full Changelog: v1.2.1...v1.2.2