Skip to content

v0.6.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Aug 00:19
· 2 commits to main since this release
v0.6.2
550e1a5

A dependency security fix.

Security

  • h2 is upgraded to 0.4.16, for RUSTSEC-2026-0258. Versions through 0.4.15 accept and queue empty DATA frames without limit, so a stream that is not actively drained can grow memory without bound. zecd reaches h2 only transitively, but by two paths that both carry real traffic: hyper under axum, which serves the JSON-RPC port, and hyper under tonic, which is light mode's upstream connection.

Full Changelog: v0.6.1...v0.6.2

Assets 7
Loading