Skip to content

v1.0.1 — Security Hardening

Choose a tag to compare

View all tags
@Heiphaistos Heiphaistos released this 21 Jun 00:30
· 22 commits to main since this release
v1.0.1
bf0cb00

Security (CRITICAL): fix SSRF vulnerability in image download (HTTP blocked, private network ranges 10.x/192.168.x/172.16.x/127.x/169.254.x denied) and Plex server URL validation. Fix path traversal in plugin toggle/delete/export/generate commands via canonicalize + starts_with guard.

Assets 2
Loading