Security Update
This release addresses a path traversal vulnerability. We strongly recommend updating to this version as soon as possible. Attachment paths and the DataTable embedding's src option were not properly validated, allowing files outside the wiki repository to be read.
Thanks to @NomanProdhan for responsibly disclosing this issue and bringing it to our attention.
Security Fixes
- Prevent path traversal via attachment paths and the DataTable embedding
srcoption, which allowed reading files outside the wiki repository (62a5336).
Dependencies
- Bump gitpython from 3.1.54 to 3.1.55 (78d6ba6).
Contributors
NomanProdhan