Fedify 0.9.3 #94
Fedify 0.9.3
#94
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Released on July 9, 2024.
Fixed a vulnerability of SSRF via DNS rebinding in the built-in document loader. [CVE-2024-39687]
fetchDocumentLoader()function now throws an error when the given domain name has any records referring to a private network address.getAuthenticatedDocumentLoader()function now returns a document loader that throws an error when the given domain name has any records referring to a private network address.This discussion was created from the release Fedify 0.9.3.
Beta Was this translation helpful? Give feedback.
All reactions