v1.0.3

1.0.3 (2025-12-16)

Bug Fixes

TAXII 2.1 Specification Compliance

• taxii: resolve match query parsing and TAXII 2.1 spec compliance after NestJS v11 upgrade (d602846)

  • All endpoints requiring the Content-Type response header now set the appropriate TAXII value (application/taxii+json;version=2.1)
  • Added support for match[version]=first, match[version]=last, and match[version]=all query parameters
  • Server now rejects requests with duplicate match query parameter keys (e.g., match[type]=attack-pattern&match[type]=tool)
  • Comma-separated values remain supported (e.g., match[type]=attack-pattern,tool)

• taxii: correctly compute X-TAXII-Date-Added headers (ecd477d)

  • Resolved buffer overflow causing X-TAXII-Date-Added-Last to incorrectly match X-TAXII-Date-Added-First in large envelope responses
  • Headers now format as proper TAXII timestamp resources

Collection Synchronization

• hydrate: enable pulling multiple versions of a STIX collection (99fa771)
  • The TAXII server can now synchronize multiple versions of the same STIX collection (e.g., ATT&CK v17.1 and v18.1 with identical STIX id values)
  • Previously, only the first observed collection would synchronize

Code Quality

• resolve linting errors (d9304ac)