Vapor 4.61.1 released!

[NewsBot]

Vapor 4.61.1 has been released.

Security Update

This release fixes an issue where the URLEncodedFormDecoder was vulnerable to a Denial of Service attack. Largely nested data would cause a stack overflow crash. We recommend upgrading to this release as soon as possible. For more details see the security advisory GHSA-qvxg-wjxc-r4gg.

This has been designated as CVE-2022-31019

Link: Release 4.61.1 · vapor/vapor · GitHub

[bot]

Corresponding tweet for this thread:

Devtalk

Share link for this tweet.