Skip to content

v0.2.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Oct 11:22
· 2 commits to main since this release
v0.2.4
a4cd57e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • proxy-addr moves to 2.0.8, closing GHSA-jqcg-44mw-7w3h (IP spoofing via an IPv4-mapped IPv6 trust subnet). It ships transitively through @modelcontextprotocol/sdk's express dependency, which the gateway never imports, so the vulnerable code path was not reachable; the version bump closes the self-audit finding regardless.
docker pull ghcr.io/k2so-dev/junctio:0.2.4
Assets 2
Loading