v0.0.53
What's Changed
- fix(editor): keep workflow name visible on small screens + responsive toolbar tooltips by @ckakgun in #252
- update/agentsmd-and-e2e-canvas-tests by @mbakgun in #253
- impl/file-save-node by @mbakgun in #254
- impl/file-upload-trigger by @mbakgun in #255
- fix MCP workflow tool calls by @mbakgun in #256
- update/docs-and-mcp by @mbakgun in #257
Security Fixes : Security: fixed an authenticated sandbox escape in the workflow condition evaluator that allowed arbitrary Python and OS command execution on the backend host (GHSA-pm6h-x3h5-j38h). Condition expressions now run through a hardened, AST-based evaluator that blocks attribute traversal, and Slack/Telegram webhook verification now fails closed. Reported by @okcomputerfan (also known as pixileaf). Thank you.
Full Changelog: v0.0.52...v0.0.53