Fedify 0.10.1 #89
Fedify 0.10.1
#89
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Released on July 5, 2024.
Fixed a SSRF vulnerability in the built-in document loader. [CVE-2024-39687]
fetchDocumentLoader()function now throws an error when the given URL is not an HTTP or HTTPS URL or refers to a private network address.getAuthenticatedDocumentLoader()function now returns a document loader that throws an error when the given URL is not an HTTP or HTTPS URL or refers to a private network address.This discussion was created from the release Fedify 0.10.1.
Beta Was this translation helpful? Give feedback.
All reactions