Skip to content

Forge v1.0.8

Choose a tag to compare

View all tags
@Docteur-Parfait Docteur-Parfait released this 19 Sep 14:49
· 62 commits to main since this release
v1.0.8
3cd5251
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Atomic auth_tokens.consume() (conditional UPDATE) — closes reset/verify TOCTOU races
  • SEO favicon path checks sandboxed via safe_resolve; reject .. traversal

Reporter credit: @KevineCharles

Contributors

KevineCharles
Assets 2
Loading