Skip to content

v6.1.1

Latest

Choose a tag to compare

@github-actions github-actions released this 12 Oct 12:48
· 3 commits to main since this release
916b9fa

v6.1.1 (2026-10-10)

Fix

  • agent: reuse the signed call on v4 fallback, and re-sign after time sync only if provably expired (#1405)
  • Prevent DOM XSS in Candid UI error rendering (#1399)
  • candid: bound decode allocation to prevent memory-exhaustion DoS (#1393)
  • candid: bound LEB128 decoding to prevent CPU-exhaustion DoS (#1391)
  • agent: detect conflicting ic_env cookies instead of taking the first (#1386)