Skip to content

v.6.1.2 (2026-10-25): Sagitara - Security and performance maintenance release

Latest

Choose a tag to compare

@mariuszgromada mariuszgromada released this 25 Oct 16:43
· 6 commits to master since this release

v.6.1.2 (2026-10-25): Sagitara - Security and performance maintenance release

  • Security fix: Addresses GHSA-7fcj-crmh-pvhp, a quadratic-time numeric literal tokenization issue that could cause excessive CPU consumption when checking or evaluating expressions containing very long numeric literals.
  • Performance improvement: Replaces repeated numeric-prefix validation with efficient scanning in Java, C#, and C++, including related implied multiplication and fraction recognition paths.
  • Compatibility: Preserves the existing public API and expression syntax, with additional regression coverage.