Skip to content

DSH Cockpit 0.2.1

Choose a tag to compare

View all tags
@ethan0084 ethan0084 released this 16 Aug 05:29
· 5 commits to main since this release
v0.2.1
16ceb68
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security release for workbook preview.

  • Replaces vulnerable npm xlsx@0.18.5 with vendored SheetJS CE 0.20.3 from the authoritative SheetJS distribution
  • Remediates exposure to CVE-2023-30533 and CVE-2024-22363
  • Adds a 25 MB Office preview limit
  • Keeps .xls and .xlsx preview support
  • Includes the SheetJS Apache-2.0 license in the release bundle

Upgrade:

dsh plugin --profile web add dsh-cockpit@0.2.1
Assets 3
Loading