Skip to content

Commit

Permalink
Merge branch 'develop'
Browse files Browse the repository at this point in the history
  • Loading branch information
jamiesun committed May 17, 2024
2 parents 21a608c + 53482ee commit 6b697a1
Show file tree
Hide file tree
Showing 2 changed files with 25 additions and 6 deletions.
19 changes: 19 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
## Security Update: XSS Vulnerability Fix

We have released a new version (v8.0.7) that addresses a critical security vulnerability related to cross-site scripting (XSS). The issue was found in the `errmsg` parameter handling in the login endpoint.

### Affected Versions
- Versions 8.0.1 ~ 8.0.7

### Fixed Versions
- Version v8.0.8

### Recommended Actions
We strongly recommend all users to update to the latest version (1.0.3) immediately. You can update your project by following the instructions in our documentation.

### Reporting Security Issues
If you find any security issues, please report them to [jamiesun.net@gmail.com](mailto:jamiesun.net@gmail.com). We appreciate your help in keeping our project secure.

Thank you for your attention to this important update.

- The Security Team
12 changes: 6 additions & 6 deletions assets/buildinfo.txt
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
BuildVersion=latest v8.0.7 2024-05-17 13:47:07
BuildVersion=latest v8.0.7 2024-05-17 14:24:48
ReleaseVersion=v8.0.7
BuildTime=2024-05-17 13:47:07
BuildTime=2024-05-17 14:24:48
BuildName=toughradius
CommitID=b4611353205746fcd10466dda836545c0cc59b37
CommitDate=Thu, 16 May 2024 16:33:04 +0800
CommitUser=jamiesun.net@gmail.com
CommitSubject=2024-05-16 16:32:57 : fix text error
CommitID=21a608ca5ffa2387294f22facb31d49daf9b6df3
CommitDate=Fri, 17 May 2024 13:50:28 +0800
CommitUser=noreply@github.com
CommitSubject=Bump golang.org/x/net from 0.19.0 to 0.23.0 (#169)

0 comments on commit 6b697a1

Please sign in to comment.