v2.4.5
⚠️ Security Warning
This release addresses the following high-severity security advisories:
- GHSA-5jgf-p345-68v8 — host confusion via skipped IDN canonicalization on scheme-relative references
- GHSA-fph4-wmhf-6fwf — server-side request forgery via repeated hostname percent-decoding
- GHSA-f65p-4m7j-42xc — server-side request forgery via malformed IPv6 normalization
- GHSA-jqff-g426-hqxp — host confusion via percent-encoded scheme normalization
Users of the v2.x release line should upgrade to v2.4.5.
Full Changelog: v2.4.4...v2.4.5