You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Security
Update Swoole from 6.2.4 to 6.2.5 on PHP 8.3, 8.4 and 8.5. 6.2.4 treats a client-supplied Swoole-Upload-File multipart part header as an upload and unlinks the path it names; 6.2.5 ignores it (swoole/swoole-src#6309). Use 2.1.6 instead of 2.1.5.
Changes
CI runs tests-swoole.php against every built image and fails if Swoole deletes a file named by that header (#22).
