v6.2.1

What's Changed

• Bump the all group with 2 updates by @dependabot[bot] in #441
• bracket IPv6 hosts in summary output URLs by @Noethix55555 in #444
• fix(dict): sanitize route lines when parsing dictionary by @Noethix55555 in #449
• fix(skip): bound IPv6 prefix expansion to avoid hang by @Noethix55555 in #453
• fix(output): strip CR/LF from device label in m3u playlist by @Noethix55555 in #455
• Validate scan targets and reject flag-like tokens by @Noethix55555 in #458
• fix(attack): clamp probeDescribeHeaders timeout to default when timeout is zero by @Noethix55555 in #457
• docs: add SECURITY.md by @Ullaakut in #459
• fix(ui): percent-encode credentials in the summary RTSP URL by @Noethix55555 in #447
• fix: reject control characters in dictionary credentials by @Noethix55555 in #460
• fix(attack): keep scanning when a single camera is unreachable by @Noethix55555 in #451
• fix(ui): strip control chars from device label in terminal summary by @Noethix55555 in #466
• fix(nmap): honor tunnel=ssl scheme and log MAC addresses via debug by @Noethix55555 in #465
• fix(m3u): emit all discovered routes and strip tabs from device label by @Noethix55555 in #464
• fix(skip): avoid uint16 overflow infinite loop for port ranges ending at 65535 by @Noethix55555 in #462
• fix(stream): preserve query-string routes instead of percent-encoding ? by @Noethix55555 in #461
• fix(attack): surface error when context is cancelled before all targets are queued by @Noethix55555 in #468
• fix(ui): correct column-width overhead in clampColumns by @Noethix55555 in #475
• fix(attack): scope fallback auth-scheme check to the method token only by @Noethix55555 in #471
• fix(dict): strip UTF-8 BOM from credentials JSON before unmarshaling by @Noethix55555 in #469
• fix(attack): bound DESCRIBE response read and keep headers on EOF by @Noethix55555 in #463
• fix(skip): resolve hyphenated service names instead of rejecting as port ranges by @Noethix55555 in #470
• fix(attack): reject non-RTSP protocol tokens in probeDescribeHeaders status line by @Noethix55555 in #472
• chore(deps): bump actions/checkout from 6 to 7 in the all group by @dependabot[bot] in #477
• fix(nmap): treat well-known RTSP ports as candidates when service is undetected by @Noethix55555 in #473
• chore(deps): bump the all group with 2 updates by @dependabot[bot] in #478
• chore(deps): bump actions/cache from 5 to 6 in the all group by @dependabot[bot] in #479
• chore(deps): bump github.com/pion/rtp from 1.10.2 to 1.10.3 in the all group by @dependabot[bot] in #480
• chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 in the all group by @dependabot[bot] in #484
• chore(deps): bump actions/setup-go from 6 to 7 in the all group by @dependabot[bot] in #486
• chore(deps): bump github.com/pion/rtp from 1.10.3 to 1.10.4 in the all group by @dependabot[bot] in #485
• chore(deps): bump google.golang.org/grpc from 1.81.0 to 1.82.1 by @dependabot[bot] in #487
• fix: gotestsum in test workflow by @Ullaakut in #488

Full Changelog: v6.2.0...v6.2.1