v5.4.52
·
327 commits
to 8.2
since this release
Changelog (v5.4.44...v5.4.52)
- security #cve-2026-45305 Harden the Parser::cleanup() regexes against catastrophic backtracking (@nicolas-grekas)
- security #cve-2026-45304 Bound collection-alias resolution in the parser (@nicolas-grekas)
- security #cve-2026-45133 Bound recursion depth in the parser (@nicolas-grekas)
Contributors
nicolas-grekas