patches v1.9.1 #31

Merged
jkeffects merged 5 commits from develop into main 2026-09-03 15:59:33 +00:00
Owner

package update + cve close
change: token retrieve styling
enhance: allow webapi token regenerate
fix: nginx conf allow local pdf iframe embed

package update + cve close change: token retrieve styling enhance: allow webapi token regenerate fix: nginx conf allow local pdf iframe embed
package update + cve close
Some checks failed
Type-Build-Check / Type & Build (pull_request) Has been cancelled
Type-Build-Check / Docker Build (pull_request) Has been cancelled
9f6616a2ab
@humanfs/node  <0.16.8
Severity: moderate
humanfs: Recursive copy follows symlinked files and copies data from outside the source tree -https://github.com/advisories/GHSA-p498-v437-472g

browserslist  <=4.28.6
Severity: high
Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM - https://github.com/advisories/GHSA-c83g-rgw3-j3cx
Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) - https://github.com/advisories/GHSA-73wf-gq98-2v4g

fast-uri  3.0.0 - 3.1.5
Severity: high
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references - https://github.com/advisories/GHSA-5jgf-p345-68v8
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization - https://github.com/advisories/GHSA-f65p-4m7j-42xc
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding - https://github.com/advisories/GHSA-fph4-wmhf-6fwf
fast-uri vulnerable to host confusion via percent-encoded scheme normalization - https://github.com/advisories/GHSA-jqff-g426-hqxp
Merge branch 'main' into develop
All checks were successful
Type-Build-Check / Type & Build (pull_request) Successful in 2m59s
Type-Build-Check / Docker Build (pull_request) Successful in 3m30s
233c5429e5
Sign in to join this conversation.
No reviewers
No labels
bug
feature
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
FF-Admin/ff-operation!31
No description provided.