Uptime Kuma 2.5.8 → 2.5.9
1 release · 0 breaking changes · 3 security fixes · 1 advisory fixed
3security0breaking0deprecated0feature4fix
Vulnerabilities fixed by this upgrade
- 4.3 GHSA-86ch-2247-gr56 Unauthenticated Host-header injection and RSS cache poisoning
Breaking changes
None in the release notes.
Security changes
- security GHSA-86ch-2247-gr56 fix: RSS cache poisoning (Thanks @the-arma-of-owl) in 2.5.9
- security #8080 chore: drop outdated apicache, migrate to http-cache-semantics (related to the above issue) in 2.5.9
- security #8050 chore: Update dependencies in 2.5.9
Every release in between
fix#8082 fix: runtime timeout fallback used milliseconds for a seconds field
fix#8081 fix: reset push monitor retries from the last stored heartbeat
fix#8079 fix: remove duplicated refresh timer on status page
fix#8064 fix: display recurring maintenance in its configured timezone (Thanks @kuxiaowo)
securityGHSA-86ch-2247-gr56 fix: RSS cache poisoning (Thanks @the-arma-of-owl)
security#8080 chore: drop outdated apicache, migrate to http-cache-semantics (related to the above issue)
security#8050 chore: Update dependencies