soft-serve releases

v0.11.6 Security relevant · 2mo

Security fixes

• LFS import local repository access control bypass

View release on GitHub

v0.11.5 Security relevant · 3mo

Security fixes

• DNS rebinding SSRF vulnerability

View release on GitHub

v0.11.4 Security relevant · 3mo

Security fixes

• DNS resolution handling in SSRF protection

Notable features

• LFS SSRF security checks

View release on GitHub

v0.11.3 Security relevant · 4mo

Security fixes

• Authentication bypass allowing access as any user

Notable features

• Certificate reloading via SIGHUP signals

View release on GitHub

v0.11.2 Security relevant · 4mo

Security fixes

• LFS lock bypass vulnerability

View release on GitHub