This release includes 1 security fix for security teams reviewing exposed deployments.
Published 14h
Productivity & Wikis
✓ No known CVEs patched
This release patches 1 known CVE
Topics
brainstorming
collaboration
idea-management
knowledge-base
mental-space
pkm
+5 more
productivity
project-management
visual-thinking
visual-workspace
whiteboard
Affected surfaces
rce_ssrf
Summary
AI summaryFixed an SSRF protection bypass allowing IPv6 transition addresses to embed private IPv4 addresses.
Full changelog
Security
- Fixed an SSRF protection bypass (GHSA-fwh7-rv72-xh5q) where IPv6 transition addresses could embed private IPv4 addresses and bypass the SSRF blocklist. Reported by @tonghuaroot.
Security Fixes
- dep: GHSA-fwh7-rv72-xh5q — SSRF protection bypass via IPv6 transition addresses embedding private IPv4
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About ideon
Your project is scattered across too many tools. Map the chaos on an infinite canvas where notes, files, TO-DOs (and more!) finally live together.
Related context
Related tools
Beta — feedback welcome: [email protected]