Changelog for v4.11.2 #2529

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merged

aldas merged 1 commit into labstack:master from aldas:changelog_4_11_2

Oct 11, 2023

Contributor

aldas commented Oct 11, 2023

v4.11.2 - 2023-10-11

Security

Bump golang.org/x/net to prevent CVE-2023-39325 / CVE-2023-44487 HTTP/2 Rapid Reset Attack #2527
fix(sec): randomString bias introduced by CSRF/RequestID mw: switch math/random usage to crypto/random #2490 #2492
CSRF/RequestID mw: switch math/random usage to crypto/random #2490

Enhancements

Delete unused context in body_limit.go #2483
Use Go 1.21 in CI #2505
Fix some typos #2511
Allow CORS middleware to send Access-Control-Max-Age: 0 #2518
Bump dependancies #2522


          Changelog for v4.11.2

f6834f0

aldas merged commit 98a5237 into labstack:master

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet