Repository navigation
·
79 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
0.25.1
- #5166: security(azure-kms): fix SSRF vulnerability in Azure Key Vault KMS provider (GHSA-5j25-p663-ww5r)
- #5071: build(deps): bump netty.version from 4.2.18.Final to 4.2.19.Final
Changes, deprecations and removals
- #5166: Azure Key Vault KMS provider now validates the vaultName field in Encrypted Data Encryption Keys (EDEKs) to prevent Server-Side Request Forgery (SSRF) attacks.