Skip to content

Nova Proxy 4.6.3 (security)

Choose a tag to compare

@iiviirv iiviirv released this 10 Aug 04:11
· 3 commits to main since this release

Security fix, recommended for everyone. Closes a vulnerability where the one-click Telegram login link could be forged by someone who only knew the panel's web address, potentially giving them admin access. The login link is now bound to the panel password and the owner's Telegram chat id, and the endpoint is rate limited. Normal Telegram login is unaffected. Includes all 4.6.x stability fixes for the 1101 error.