Skip to content

0.7.1

Choose a tag to compare

View all tags
@calebl calebl released this 23 Oct 20:38
0.7.1
f67dbd3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • zod is updated from 4.6.5 to 4.6.7 for GHSA-mrhx-c7xc-m3w5 (memory exhaustion while collecting issues for a large array without a length limit). Both servers validate tool input with zod, and the stdio server has inputs such as accountIds and subtransactions whose schemas have no maximum length. The Worker already limits request bodies to 1 MiB and nested tool inputs to 10,000 elements, after GitHub sign-in.
  • ip-address is updated from 10.7.2 to 10.7.4 for GHSA-rxp7-6hxx-x8q5. Neither server was exposed: it is only a transitive dependency of express-rate-limit, which neither server uses.
  • @vitest/mocker (with vitest) is updated from 4.1.11 to 4.1.12 for GHSA-qxg6-89mg-rqv8 and GHSA-xp26-3454-mjgp. Neither server was exposed: it is a development-only dependency.

See the CHANGELOG for details.

Assets 2
Loading