2.46.1

• Fix for a path traversal vulnerability in host VPN names that allowed a low-privilege user to leak the VPN drivers' generated credentials (thanks @Tan-JunWei for the report!)
  • Note: Host VPN names must now use only lowercase letters, numbers, underscores and hyphens, start with a letter, and be at most 63 characters long.
• The example Docker Compose file is now clearly marked as an example, and warns about the placeholder database password and JWT secret values that must be replaced before deployment (thanks @28Hus for the suggestion)
• Other minor fixes and improvements

Docker image: dillmann/nginx-ignition:2.46.1