• 1.3.1 4d0179f56f

    1.3.1 Stable

    marvin8 released this 2026-04-11 05:11:00 +00:00 | 114 commits to main since this release

    Signed by marvin8
    SSH key fingerprint: SHA256:cyGOzvyFNw+A8J/LVjRif8v3KZLo8seQDVZbk/IhNhI

    [1.3.1] - 2026-04-11

    Bug Fixes

    • (auth) Close F-01 - Redact OAuth credentials from debug log output
    • (security) Close F-03 — SSRF via unvalidated instance URL (CWE-918)
    • (security) Close F-04 — path traversal via unvalidated ID params
    • (security) Close F-05 — replace mutable PAGINATION_UNDEFINED with
    • (security) Close F-06 — validate server-returned media ID before

    Documentation

    • (security) Close F-02 as not applicable to OOB-only design
    Downloads