Skip to content

2.0.0-milestone-10

Choose a tag to compare

View all tags
@aaronzi aaronzi released this 23 Apr 20:11
· 5 commits to main since this release
2.0.0-milestone-10
99125cf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • Build(deps): Bump org.apache.maven.plugins:maven-compiler-plugin from 3.14.1 to 3.15.0 by @dependabot[bot] in #993
  • fix: Implement zero as limit for getAllSubmodels by @Linus187erz in #1000
  • fix(security): block critical CWE-22 path traversal in file uploads
  • fix(security): mitigate blind SSRF in operation delegation (CWE-918) by @aaronzi in #1001

New Contributors

Full Changelog: 2.0.0-milestone-09.1...2.0.0-milestone-10

Contributors

aaronzi, dependabot, and Linus187erz
Assets 2
Loading