Skip to content

v0.0.2

Choose a tag to compare

@github-actions github-actions released this 22 Oct 15:10
· 15 commits to main since this release
f04c5b9

Security

  • The standalone macOS binaries (flashlink-darwin-arm64, flashlink-darwin-x64) are now built with
    Bun 1.4.4. The 0.0.1 binaries embed Bun 1.4.2, whose Brotli decoder has an out-of-bounds write
    (CVE-2026-111497) reachable when decompressing a br-encoded HTTP response. Reinstall with the
    installer to update. The npm package runs on your own Node.js and is not affected by this change.

Changed

  • The macOS support archive no longer includes macos/qa.sh, a maintainer-only QA script the installer
    never used.