Skip to content

chhoto-url

v7.2.2 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 1mo Developer Productivity
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Topics

actix-web compose container docker link-shortener containers
+6 more
quadlets rust self-hosted shortener url-shortener web

Summary

AI summary

Security fixes for three vulnerabilities (GHSA-mrg7-f4ww-wqwc, GHSA-c4fp-hwr3-8rx9, GHSA-rw9x-6h8h-92mg).

Full changelog

Fixes

  • GHSA-mrg7-f4ww-wqwc by @SinTan1729 in d93e6c0
  • GHSA-c4fp-hwr3-8rx9 by @SinTan1729 in 33bbc25
  • GHSA-rw9x-6h8h-92mg by @SinTan1729 in 267e247
  • Location of Dockerfile and LICENSE in action by @SinTan1729 in f11487f

Changes

  • Renamed actix -> backend and resources -> frontend by @SinTan1729 in fdd2ab0
  • Impl Display for SlugStyle enum by @SinTan1729 in eda864f

Note

Thanks to @de3erve-hunter for reporting the security issues.

Full Changelog: https://github.com/SinTan1729/chhoto-url/compare/7.2.1...7.2.2
Link to Docker Hub

Security Fixes

  • GHSA-mrg7-f4ww-wqwc — security fix applied in commit d93e6c0
  • GHSA-c4fp-hwr3-8rx9 — security fix applied in commit 33bbc25
  • GHSA-rw9x-6h8h-92mg — security fix applied in commit 267e247
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track chhoto-url

Get notified when new releases ship.

Sign up free

About chhoto-url

A simple, blazingly fast, selfhosted URL shortener with no unnecessary features; written in Rust.

All releases →

Related context

Earlier breaking changes

  • v7.1.1 Release contains critical bug; must upgrade to 7.1.2

Beta — feedback welcome: [email protected]