Skip to content

v2.0.1 — CodeQL ReDoS hardening

Choose a tag to compare

@TheStreamCode TheStreamCode released this 01 Aug 06:30
· 16 commits to main since this release

Security

  • Replaces polynomial regular-expression operations on API base URLs and model/cord identifiers with linear scans.
  • Adds regression coverage using long repeated delimiter inputs.
  • Resolves both high-severity CodeQL findings opened after v2.0.0; the repository now has zero open CodeQL alerts.

This patch contains no API changes beyond the v2.0.0 upgrade requirements. Install or upgrade with npm install chutes-media-mcp@2.0.1.

Full Changelog: v2.0.0...v2.0.1