v1.15.1: Zenos yae Galvus: Echo 1 #183
Xe
announced in
Announcements
Replies: 2 comments 6 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Fixes a recurrence of CVE-2025-24369
due to an incorrect logic change in a refactor. This allows an attacker to mint a valid
access token by passing any SHA-256 hash instead of one that matches the proof-of-work
test.
This case has been added as a regression test. It was not when CVE-2025-24369 was released
due to the project not having the maturity required to enable this kind of regression testing.
If you use Anubis in Docker, pull the new
:latest
image or update your config to pullv1.15.1
.If you manually built Anubis, you will need to re-build for this patch. #156 is tracking proper binary packages.
Beta Was this translation helpful? Give feedback.
All reactions