Skip to content

v2.0.66 (2026-05-20)

Choose a tag to compare

@ryanbr ryanbr released this 23 May 09:14
· 379 commits to main since this release

Added

  • DNS pre-check before page.goto() to skip unresolvable hosts fast — --no-dns-precheck to disable
  • In-process SOCKS5 auth relay so socks5://user:pass@host URLs work end-to-end
  • socks-relay handshake-phase watchdog so stalled clients can't sit forever
  • DNS pre-check EAI_AGAIN retry-once + FIFO cap on negative cache

Fixed

  • proxy.js: SOCKS auth false-success + SOCKS4 remote-DNS footgun
  • DNS pre-check was starving under scan load (dns.lookup queued behind Puppeteer's libuv threadpool); switched to dns.resolve (c-ares, no threadpool contention)
  • DNS pre-check: clear the timeout timer when lookup wins the race
  • Bumped ws override to >=8.20.1 (CVE-2026-45736, GHSA-58qx-3vcg-4xpx)

Improved

  • Neutralize Fullscreen API so sites can't hijack the window in --headful mode
  • socks-relay: disable Nagle + reject unoffered no-auth selection