# Crystal 1.22.3 released!

**URL:** <https://forum.devtalk.com/t/crystal-1-22-3-released/251692>\
**Category:** Backend Official News\
**Tags:** newsbot, crystal, official-news\
**Created:** [13 November 2026 22:23 UTC](https://forum.devtalk.com/t/crystal-1-22-3-released/251692 "2026-11-13T22:23:54Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NewsBot](https://forum.devtalk.com/user_avatar/forum.devtalk.com/newsbot/32/1114_2.png) [@NewsBot](https://forum.devtalk.com/u/NewsBot)\
**Post date:** [13 November 2026 22:23 UTC](https://forum.devtalk.com/t/crystal-1-22-3-released/251692/1 "2026-11-13T22:23:54Z")

</div>

[Crystal](https://devtalk.com/crystal) 1.22.3 has been released.

> [@](#):
>
> ### Bugfixes
> 
> #### stdlib
> 
> - _(collection)_ **[regression]** Fix `Enum.parse?` max bytesize buffer limit ([#17836](https://github.com/crystal-lang/crystal/pull/17836), thanks @straight-shoota)
> - _(crypto)_ Reject malformed Bcrypt hashes ([#17677](https://github.com/crystal-lang/crystal/pull/17677), thanks @Blacksmoke16)
> - _(networking)_ **[security]** Fix validate service for `getaddrinfo` is in range ([#17848](https://github.com/crystal-lang/crystal/pull/17848), thanks @straight-shoota)
> - _(networking)_ **[security]** Fix reject control whitespace before field value in HTTP headers ([#17903](https://github.com/crystal-lang/crystal/pull/17903), thanks @ysbaddaden)
> - _(networking)_ **[security]** Fix `close` token in `Connection` header must close connection ([#17904](https://github.com/crystal-lang/crystal/pull/17904), thanks @ysbaddaden)
> - _(networking)_ **[security]** Fix `HTTP::ChunkedContent` must validate the chunk-line ([#17898](https://github.com/crystal-lang/crystal/pull/17898), thanks @ysbaddaden)
> - _(networking)_ **[security]** Fix HTTP must validate content-length header ([#17902](https://github.com/crystal-lang/crystal/pull/17902), thanks @ysbaddaden)
> - _(runtime)_ **[security]** Fix `IO::Delimited` matching after a fragmented delimiter mismatch ([#17916](https://github.com/crystal-lang/crystal/pull/17916), thanks @ysbaddaden)
> - _(serialization)_ Fix reject NUL byte in IO-based JSON lexer ([#17897](https://github.com/crystal-lang/crystal/pull/17897), thanks @straight-shoota)
> - _(system)_ Fix `Process::INITIAL_PWD` to ignore access denied error ([#17748](https://github.com/crystal-lang/crystal/pull/17748), thanks @straight-shoota)
> - _(system)_ Fix `File.symlink` discover target file type on Windows ([#17742](https://github.com/crystal-lang/crystal/pull/17742), thanks @straight-shoota)
> 
> ### Infrastructure
> 
> - Changelog for 1.2…

Link: [Release 1.22.3 · crystal-lang/crystal · GitHub](https://github.com/crystal-lang/crystal/releases/tag/1.22.3)