Skip to content

v2.19.14

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Oct 02:04
· 75 commits to main since this release
v2.19.14
7dc8150
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Harden reverse DNS prefix parsing, enforce strict type guards across core validation
and MCP stdio tools, and bound injected ephemeral fingerprint rules.

Security

  • Fix positional network prefix evaluation in _is_private_v4_reverse to prevent private
    reverse DNS bypasses when host octets repeat 172 or 100.
  • Enforce runtime type validation in validate_domain, is_safe_dns_name, and
    strip_control_chars to return structured errors on non-string inputs.
  • Enforce strict type validation and length limits on ephemeral fingerprint injection
    fields, detections, and regex patterns.
  • Guard MCP tool parameters against invalid types, rejecting booleans and non-integers
    in pagination limits, chain_lookup depth, get_signals layer, and explain_signal name.
  • Preflight destination path usability in batch discovery to fail fast on invalid output paths.

Changed

  • Refactor hypothesis matching and DAG explanation format validation to preserve complexity ratchets.

Tool Surface Changes

  • No commands, flags, MCP tools or schema fields changed. Strict runtime type contracts and bounds on core validation, reverse DNS parsing, and MCP tools are enforced.
Assets 6
Loading