Skip to content

v3.71.4 — security patch

Latest
Latest

Choose a tag to compare

View all tags
@ruvnet ruvnet released this 05 Nov 03:36
v3.71.4
bf5d71a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security patch release: @claude-flow/cli, claude-flow, ruflo 3.71.4. Upgrade is recommended for everyone who runs the ruflo MCP server.

Security fixes

  • browser tools (#4783): browser_open accepts only a fixed list of plain Chromium switches. No caller value may add an agent-browser option.
  • memory export / import (#4783):
    • For MCP callers, memory_export and memory_import paths must be inside the project. Symlinks, .git, executables, and servers started from a home or filesystem root are refused.
    • Import errors no longer quote the file.
    • An explicit dbPath must be a SQLite database file, plaintext or encrypted at rest.
    • The ruflo memory export/import/stats commands still accept any path the operator gives.
  • record ids (#4783): __proto__, constructor and prototype are refused as ids. The agent, task, terminal, swarm and neural stores load without a prototype, completing #4671.
  • federation BBS (#4783): a merged envelope's origin must be the syncing peer or another pinned peer, and it must verify against that origin's key. The sync cursor advances only past verified envelopes.
  • ruvocal (#4788):
    • With no MCP_AUTH_TOKEN, the ruvocal mcp-bridge refuses a non-loopback Host and foreign browser origins. This is the #4226 guard, now on both bridges.
    • MCP server URLs from requests must be public HTTPS, and the connection is checked against public addresses when it is made. Local addresses stay available for operator-configured MCP_SERVERS.
  • learning hooks (#4791):
    • .claude-flow/data files committed to a repository are no longer used as this machine's learned patterns, are not synced into Claude Code memory, and are never rewritten.
    • Surfaced notes are one flat line, labelled as project data.
  • x.ruv.io gateway 0.9.2 (#4784): per-IP limits use the trusted forwarding address instead of the caller-supplied X-Forwarded-For value. This is a service fix; it is not part of the npm packages.

Also

  • ruflo-mods 0.16.2: the ranked-memory block carries the same project-data label.

Advisories with full details are published alongside this release.

Assets 2
Loading