Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix!: vulnerability issues #436

Merged
merged 2 commits into from
Jul 27, 2024
Merged

fix!: vulnerability issues #436

merged 2 commits into from
Jul 27, 2024

Conversation

sekwah41
Copy link
Owner

No description provided.

Thanks to rooter.rs for notifying me of these issues :)

Multiple people made me aware of this one, but they were the first :D

For details see https://roote.rs/posts/advancedportals/
…it for more info)

If you are using 1.12 or lower you are unaffected as the features causing this issue were not implemented back then.

Thanks to rooter.rs for notifying me of these issues as well as helping code and test a fix for this.

Velocity was unaffected by this issue if you had the plugin on the proxy though due to the likelihood that may not be the case I have decided to disable this for everyone by default

If you are on bungee you will 100% want to update to this version right away.

For a full writeup by roote.rs see https://roote.rs/posts/advancedportals/
@sekwah41 sekwah41 merged commit 8f29d20 into spigot Jul 27, 2024
1 check passed
@sekwah41 sekwah41 deleted the vulnerability-fixes branch July 27, 2024 22:41
@sekwah41 sekwah41 added major Increment the major version when merged release Create a release when this pr is merged labels Jul 27, 2024
Copy link
Contributor

🚀 PR was released in v1.0.0 🚀

@github-actions github-actions bot added the released This issue/pull request has been released. label Jul 27, 2024
Copy link
Contributor

🚀 PR was released in v1.0.0 🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
major Increment the major version when merged release Create a release when this pr is merged released This issue/pull request has been released.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant