Skip to content

v1.4.1

Latest
Latest
Compare
Choose a tag to compare
@jaitaiwan jaitaiwan released this 29 Jun 20:36
v1.4.1
cd59f2f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

Security Release

Fixes an issue where sparse slice deserialization can cause memory exhaustion CVE-2024-37298

Thanks to @AlexVasiluta for the report and following responsible disclosure.

Full Changelog: v1.4.0...v1.4.1

Contributors

AlexVasiluta
Assets 2
Loading