Skip to content

v0.42.1

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Jun 14:18
v0.42.1
68b4822

Security release

0.42.1 completes the fix for CVE-2026-47211 (RCE via untrusted project-directory .env). The 0.39.0 denylist was incomplete; several execution-routing keys of the same class were still honored from a cloned repo's auto-loaded .env, and a committed project-dir MCP roster could be auto-loaded. All upgrade-affected users should move to 0.42.1.

See advisory GHSA-jv2h-4p9v-wf5w for details.

Bug Fixes

  • security: add backend config-home roots (CODEX_HOME, OPENCODE_CONFIG, OPENCODE_CONFIG_DIR, XDG_CONFIG_HOME) to the untrusted-.env denylist
  • security: denylist MCP-bridge / plugin execution roster + trust roots (OUROBOROS_MCP_CONFIG, OUROBOROS_PLUGIN_LOCKFILE, OUROBOROS_PLUGIN_TRUST_ROOT) and the SSRF transport toggle (OUROBOROS_ALLOW_LOCAL_TRANSPORT)
  • security: denylist instruction / capability roots (OUROBOROS_AGENTS_DIR, COPILOT_CUSTOM_INSTRUCTIONS_DIRS, OUROBOROS_RUNTIME_PROFILE, OUROBOROS_TOOL_CAPABILITIES)
  • security: stop auto-loading ./.ouroboros/mcp_servers.yaml from the working directory (RCE with no .env)
  • harden the denylist regression suite to derive from the source set (drift guard)

Features

  • plugin: wire tool-call hook dispatch (#1344)

Credits

Coordinated-disclosure reports by matte1782 and hackkim (https://github.com/hackkim).

Full Changelog: v0.42.0...v0.42.1

What's Changed

Full Changelog: v0.42.0...v0.42.1

Contributors

shaun0927
Assets 9
Loading