Vapor 4.60.3 released!

[NewsBot]

Vapor 4.60.3 has been released.

Security Update

This release fixes an issue where the FileMiddleware was vulnerable to a Denial of Service attack. Invalid range headers could cause the application to crash. If using FileMiddleware we recommend upgrading to this release as soon as possible. For more details see the security advisory GHSA-vj2m-9f5j-mpr5.

This has been designated as CVE-2022-31005

Link: Release 4.60.3 · vapor/vapor · GitHub

[bot]

Corresponding tweet for this thread:

Devtalk

Share link for this tweet.