Skip to content

v11.0.1

Latest
Latest

Choose a tag to compare

View all tags
@Apollolight Apollolight released this 26 Jun 03:22
· 1 commit to master since this release
v11.0.1
fee4811
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  1. Resolved a Path Traversal vulnerability in ZipUtil by enforcing canonical path checks [CWE-22].
  2. Mitigated an XML External Entity (XXE) vulnerability by hardening DocumentBuilderFactory [CWE-611].
  3. Removed legacy KeyUtils class to eliminate hardcoded cryptographic components [CWE-798].

Thanks to independent security researcher Sebastián Alba Vives for identifying these issues.

Assets 2
Loading