Skip to content

2.7.1392

Choose a tag to compare

View all tags
@seancorfield seancorfield released this 26 Jun 19:21
· 63 commits to develop since this release
Immutable release. Only release title and notes can be modified.
v2.7.1392
26bdd6e
This commit was signed with the committer’s verified signature.
seancorfield Sean Corfield
SSH Key Fingerprint: GxRyjFy2EW55mjYE4u22IMdPEhwe1PebI8yCxjXZxxc
Verified
Learn about vigilant mode.
  • Address Security Advisory CVE ID requested
  • Expand suspicious character check and apply it to sql-kw, format-fn-name, and quoted form in format-simple-var to prevent several SQL injection vectors via keyword / symbol conversion of user input. Reported by Younghun Ko.
  • Fix escaped quote handling in :inline for strings to prevent SQL injection via inlining user input. Reported by Younghun Ko.
Assets 3
Loading