Skip to content

v0.5.2

Latest

Choose a tag to compare

@github-actions github-actions released this 25 Oct 15:20
· 26 commits to main since this release

A security fix in a library underneath. Nothing in RFutils itself changed.

  • Security: multer 2.5.0 (GHSA-q7qp-rjg7-q26m, high). Before 2.5.0, a server that vets uploads with an asynchronous fileFilter could be crashed by one request torn down while a check was still pending. RFutils' upload routes (convert, detect and the PMSE import) use no fileFilter at all, so the hole was never reachable here. This release is so the desktop installers and the node bundle stop carrying it anyway: a lock nobody can reach is still a lock you'd rather replace. The Docker image has had 2.5.0 since it reached main.

Full Changelog: v0.5.1...v0.5.2