MikkoParkkola/nab

v0.12.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Browser & Automation

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai-agents anti-bot asr claude-code cli cookies

+14 more

http3 llm llm-agents llm-tools markdown mcp model-context-protocol multimodal ocr passkeys prompt-injection rust url-to-markdown web-fetch

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 1mo

Patch Dependabot alerts and implement prompt‑injection defenses in this release.

Why it matters: Dependabot alerts pose a security risk; addressing them with the provided patch mitigates potential injection attacks immediately.

Summary

AI summary

Updated CI gating, added LinkedIn activity feed and fingerprint features, advanced task engine (MIK-5359), raised Python floor, patched Dependabot alerts, bumped multiple dependencies.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Patch Dependabot alerts and add prompt‑injection defense. Patch Dependabot alerts and add prompt‑injection defense. Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Add SSRF opt‑out escape hatch for internal network access. Add SSRF opt‑out escape hatch for internal network access. Source: llm_adapter@2026-06-08 Confidence: high	—
Dependency
Dependency	Low	Bump Rust runtime from 1.95‑slim to 1.96‑slim. Bump Rust runtime from 1.95‑slim to 1.96‑slim. Source: llm_adapter@2026-06-08 Confidence: high	—
Dependency	Low	Bump rustls‑native‑certs from 0.8.3 to 0.8.4. Bump rustls‑native‑certs from 0.8.3 to 0.8.4. Source: llm_adapter@2026-06-08 Confidence: high	—
Dependency	Low	Raise required Python version floor from 3.9 to 3.12. Raise required Python version floor from 3.9 to 3.12. Source: llm_adapter@2026-06-08 Confidence: high	—
Dependency	Low	Bump chrono from 0.4.44 to 0.4.45. Bump chrono from 0.4.44 to 0.4.45. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix
Bugfix	Medium	Add `nab doctor` command to detect PATH‑shadowing installs. Add `nab doctor` command to detect PATH‑shadowing installs. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Add browser‑profile fallback for --cookies when Cloudflare challenge occurs. Add browser‑profile fallback for --cookies when Cloudflare challenge occurs. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Medium	Fix host‑anchor X rule and enable authenticated DOM render for X Articles. Fix host‑anchor X rule and enable authenticated DOM render for X Articles. Source: llm_adapter@2026-06-08 Confidence: high	—
Bugfix	Low	Drop duplicate X article URL matcher from browser.rs. Drop duplicate X article URL matcher from browser.rs. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

What's Changed

chore(ci): real pre-push gate parity with CI by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/118
fix(#105): add nab doctor to detect PATH-shadowing installs by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/120
fix(fetch): browser-profile fallback for --cookies auto on Cloudflare challenge (#117) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/121
feat(ssrf): add SSRF opt-out escape hatch for internal network access (fixes #107) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/122
docs: add commercial license sponsor rail by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/132
Security: patch Dependabot alerts + surface prompt-injection defense by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/133
docs(readme): lead with value pillars, security as co-equal section by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/135
ci: docs-aware aggregate gate so doc-only PRs skip the Rust matrix by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/136
docs(contributing): document docs-aware CI gate by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/138
ci(pre-push): docs-aware gate + stable TMPDIR (sccache resilience) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/139
chore(audit): acknowledge unfixable transitive advisories (#134) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/140
ci: gate releases on known dependency vulnerabilities by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/137
chore(deps): bump rust from 1.95-slim to 1.96-slim by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/123
chore(deps): bump rustls-native-certs from 0.8.3 to 0.8.4 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/126
chore(deps): bump trufflesecurity/trufflehog from 0ec3634f6cf66a61912a923fee9d20cc45633a67 to 26eae1f2969f4240acfd3fc363b504b1b43255d4 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/124
docs: salvage CITATION.cff, NOTICE, task-engine design draft by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/141
chore(deps): bump http from 1.4.0 to 1.4.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/127
chore(deps): bump wat from 1.250.0 to 1.251.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/125
chore(deps): bump aes from 0.9.0 to 0.9.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/128
docs(notice): reference LICENSE, not the nonexistent LICENSE-MIT by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/142
chore(license): enforce MIT/PolyForm-NC boundary; mark EE files; gate in CI by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/143
feat(linkedin): activity-feed support (MIK-3059) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/131
feat(fingerprint): self-updating browser fingerprint (MIK-3058) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/129
feat(session): cookie and storage-state export for MIK-5359 Phase 1 by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/130
docs(design): ratify nab task-engine direction (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/145
ci(fingerprint): require maintainer review on weekly bump PRs by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/144
docs(design): scope task-engine slice 1 against live source by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/146
feat(task): slice 2 — rung-1 API discovery surfaced in TaskOutcome by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/148
chore(audit): drop resolved lru advisory ignore RUSTSEC-2026-0002 (#134) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/149
feat(task): slice 3 — rung-1 api_call execution + ActionObservation (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/150
docs(design): slice-4 scoping — binary boundary + nab task lib promotion (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/151
feat(task): promote task schema to nab::task library module (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/152
feat(task): inject TaskFetcher — move rung routing to nab::task executor (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/153
feat(task): bounded run_task_loop — the brain-driven control loop (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/154
feat(task): expose nab task as an MCP tool (slice-4 step 4) (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/155
feat(task): self-contained sampling loop in the MCP task tool (slice-4 step 4b) (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/156
test(task): route.1 gate — loop stays at lowest rung (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/157
feat(task): extract rung — query-focused shaping of the current response (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/158
feat(task): submit rung — CSRF-aware form submission (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/159
feat(task): bench.1 token-axis primitive + kill-gate protocol (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/160
chore(deps): document gimli-yanked transitive pin, close cargo-audit #134 by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/161
feat(task): bench.1 pilot harness + api_call response shaping (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/162
feat(task): rung 3 — escalate to an external browser over CDP (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/163
docs(task): section 7.1 implementation status — ladder shipped, bench.1 pending (MIK-5359) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/164
fix(site/twitter): host-anchor X rule + authenticated DOM render for X Articles by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/165
chore: drop duplicate X article URL matcher from browser.rs (MIK-5863) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/173
chore: raise nab python floor 3.9 to 3.12 (3.9 is end-of-life) by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/175
chore: drop duplicate X article URL matcher from browser.rs by @MikkoParkkola in https://github.com/MikkoParkkola/nab/pull/174
chore(deps): bump chrono from 0.4.44 to 0.4.45 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/172
chore(deps): bump uuid from 1.23.1 to 1.23.2 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/168
chore(deps): bump dorny/paths-filter from 3.0.2 to 4.0.1 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/166
chore(deps): bump which from 8.0.2 to 8.0.3 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/171
chore(deps): bump rquickjs from 0.11.0 to 0.12.0 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/169
chore(deps): bump reqwest from 0.13.3 to 0.13.4 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/170
chore(deps): bump trufflesecurity/trufflehog from 26eae1f2969f4240acfd3fc363b504b1b43255d4 to b32841520c47f1bdf1f6f4772bac76afe07a9e92 by @dependabot[bot] in https://github.com/MikkoParkkola/nab/pull/167

Full Changelog: https://github.com/MikkoParkkola/nab/compare/v0.11.0...v0.12.0

Breaking Changes

Raise minimum supported Python version from 3.9 to 3.12

Security Fixes

Patch Dependabot alerts and surface prompt‑injection defense

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track MikkoParkkola/nab

Get notified when new releases ship.

About MikkoParkkola/nab

Ultra-fast web fetcher and MCP server with HTTP/3, JS rendering, anti-fingerprinting, browser cookie auth, and 1Password integration. Fetches any URL as clean Markdown for AI context.

All releases →