Skip to content

Checkmate v3.9.2

Latest
Latest

Choose a tag to compare

View all tags
@ajhollid ajhollid released this 07 Jul 17:41
v3.9.2
d368ec5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Status pages: public payloads now use a strict allowlist of monitor fields — credentials and internal configuration are never sent to visitors (GHSA-3m74-8cg9-rp8j)
  • Monitor advanced matching now uses RE2 with tightened regex validation — fixes ReDoS via user-controlled regex (GHSA-4c6j-p2cv-wf56)

Fixes

  • Docker: server images moved from Node 20 (EOL) to Node 22 — fixes broken image builds caused by re2 native compilation

  • Added root .dockerignore so host node_modules and .env files no longer leak into image builds

  • New unit suite covering the public status-page payload

Assets 2
Loading