Skip to content

“Stargazers” hotfix

Compare
Choose a tag to compare
@omar-polo omar-polo released this 12 Apr 20:59

This is an hotfix release for a bug in the IRI parser that can lead to a denial of service.

IRIs with multiple .. components that ends with .. (but not ../) and that don't escapes the root will cause an infinite loop, locking up one server process.


This release also backports the fix for the Dockerfile by @kornellapacz.