Skip to content

v1.21.1

Compare
Choose a tag to compare
@mphanias mphanias released this 15 Jan 09:27

New in this version

This version implements critical security fixes.

Security

  • Updated the golang.org/x/net package. The affected version was vulnerable to Denial of Service (DoS) Affected versions of this package are vulnerable to Denial of Service (DoS) through the functions parseDoctype, htmlIntegrationPoint, inBodyIM and inTableIM due to inefficient usage of the method strings.ToLower combining with the == operator to convert strings to lowercase and then comparing them. [OM-215]