Skip to content

SysManager 1.51.14

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Jun 13:32
· 852 commits to main since this release
v1.51.14
61a5a55
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[1.51.14] - 2026-06-30

Security

  • Input validators that feed a command/registry boundary now reject a trailing newline. Nine allowlist patterns (winget package IDs, service names, blocked-executable names, Appx package names, environment-variable names, Windows-feature names, event-log provider names, and hostnames) used ^…$ anchors, which in .NET match before a trailing newline — so a value like pkg\n slipped through and could smuggle a second line into the command. They now use absolute \A…\z anchors. The winget package-ID pattern additionally dropped \s (which allowed tabs/newlines mid-string) in favour of a literal space.

Tests

  • Added injection-rejection negative tests for the winget package-ID validators (UpgradeAsync, UninstallAsync) and the service-name/start-type validator (SetStartupTypeAsync), covering command separators, chaining, substitution, quotes, newlines, and over-length input.

Verify the download

Get-FileHash .\SysManager-v1.51.14.exe -Algorithm SHA256

Expected SHA256: D9B2FA5443DAC93D63716DDE1F3B7FB5CA05B761BE3A3F67F8692F4F9FD10FB7

Assets 4
Loading