Skip to content

Version v4.0.0

Latest
Latest

Choose a tag to compare

View all tags
@Sammyjo20 Sammyjo20 released this 25 Mar 20:27
· 1 commit to v4 since this release
Immutable release. Only release title and notes can be modified.
v4.0.0
1307b1d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • Foundational improvements to v4 by @JonPurvis in #539
  • Feature | v4 - Add opt in to base url overrides by @JonPurvis in #542
  • Fixed CVE-2026-33942 - Insecure deserialisation in AccessTokenAuthenticator (object injection / RCE)
  • Fixed CVE-2026-33182 - Absolute URL in endpoint overrides base URL (SSRF / credential leakage)
  • Fixed CVE-2026-33183 - Fixture name path traversal (out-of-bounds file read/write)

Full Changelog: v3.15.0...v4.0.0

Contributors

JonPurvis
Assets 3
Loading