Vapor: 4.40.1 Release

Release date:
February 22, 2021
Previous version:
4.40.0 (released February 9, 2021)
Magnitude:
263 Diff Delta
Contributors:
1 total committer
Data confidence:
Commits:

Top Contributors in 4.40.1

0xTim

Directory Browser for 4.40.1

We haven't yet finished calculating and confirming the files and directories changed in this release. Please check back soon.

Release Notes Published

Fixes an issue where an attacker could perform a denial of service attack against a Vapor application using Metrics. By sending requests to either dynamic paths with values that return a 404 or unknown paths, unlimited counters and timers could be created. This could potentially drain the system and cause knock-on effect on downstream systems.