Skip to content

5.2.8
Compare
Choose a tag to compare
@parseplatformorg parseplatformorg released this 14 Oct 22:55
· 1100 commits to release since this release
5.2.8
8011b2f

5.2.8 (2022-10-14)

Bug Fixes

  • server crashes when receiving file download request with invalid byte range; this fixes a security vulnerability that allows an attacker to impact the availability of the server instance; the fix improves parsing of the range parameter to properly handle invalid range requests (GHSA-h423-w6qv-2wj3) (#8235) (066f296)
Assets 2
Loading