Skip to content

v1.3.1

Choose a tag to compare

View all tags
@msiemens msiemens released this 15 May 20:02
· 73 commits to master since this release
v1.3.1
22119d3
This commit was signed with the committer’s verified signature.
msiemens Markus Siemens
SSH Key Fingerprint: 4idelkH5Ytp5jk4qFQkqs0BE85RynIDmTS1aNUqZY34
Verified
Learn about vigilant mode.

Security fix release. Also picks up onenote_parser 1.1.1.

Fixed

  • Prevent path traversal when writing embedded files to disk (GHSA-gcmj-c9gg-9vh6 / CVE-2026-22810).
  • Log warnings instead of panicking on unsupported constructs in image, list, note tag, and rich text rendering.

Changed

  • Update onenote_parser to 1.1.1, which adds path-traversal hardening for .onetoc2 section entries (GHSA-4j5m-wc25-pvh7), guards against transaction-log offset under-/overflow, and avoids panics on malformed ink data.
Assets 8
Loading