Skip to content

v3.14.0

Choose a tag to compare

View all tags
@goklab goklab released this 08 Jun 18:07
· 9 commits to main since this release
v3.14.0
81f288b
  • VG1088: vite < 5.4.9 (and bundled launch-editor < 2.9.0) dev-server command injection on Windows (CVE-2024-52011) — surfaced by daily intel, drafted via the scaffold pipeline
  • Exact-pin only (0-FP: caret/tilde resolve to the fix); validated on the corpus with 1 true positive and 0 false positives
  • 442 rules / 37 tools; gate green (PASS/A/0)
Assets 2
Loading