Vapor: 4.90.0 Release

Release date:
January 3, 2024
Previous version:
4.89.3 (released December 14, 2023)
Magnitude:
0 Diff Delta
Contributors:
0 total committers
Data confidence:
Commits:

Top Contributors in 4.90.0

Could not determine top contributors for this release.

Directory Browser for 4.90.0

All files are compared to previous version, 4.89.3. Click here to browse diffs between other versions.

Loading File Browser...

Release Notes Published

⚠️ Security Update ⚠️

This release fixes a long standing issue in Vapor's URI parsing if users attempt to parse untrusted input that could lead to potential host spoofing. This was caused by using a C implementation with a uint16_t index with no bounds checking. For more details see the security advisory GHSA-qvxg-wjxc-r4gg.

This vulnerability has been designated as CVE-2024-21631. Thank you to baarde for reporting!