Skip to content

v0.27.59

Choose a tag to compare

View all tags
@zalando-robot zalando-robot released this 18 Aug 16:04
v0.27.59
19f9edf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

security fix for advisory https://github.com/zalando/skipper/security/advisories/GHSA-7g9f-57qp-jhgx reported by @kanywst
Filters https://opensource.zalando.com/skipper/reference/filters/#oauthgrant and OIDC login had the weakness that the flow state was not bound to the user agent, allowing login CSRF.

Multiarch Docker image

Multiarch Docker image is available in GitHub's docker registry:

docker run -it ghcr.io/zalando/skipper:v0.27.59 skipper --help

Contributors

kanywst
Assets 9
Loading