diff --git a/CHANGELOG.md b/CHANGELOG.md index 5811d025..9e0333f6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,15 @@ # Changelog +## v1.4.394 (2026-01-25) + +### PR [#1971](https://github.com/danielmiessler/Fabric/pull/1971) by [ksylvan](https://github.com/ksylvan): Security fix high medium low priority dependabot alerts for npm dependencies + +- Fixed medium severity esbuild vulnerability that allowed websites to send requests to development server and read responses +- Updated esbuild from vulnerable version 0.21.5 to secure version 0.27.2 +- Fixed low severity @eslint/plugin-kit ReDoS vulnerability through ConfigCommentParser +- Updated @eslint/plugin-kit from vulnerable version 0.2.8 to secure version 0.5.1 +- Verified all builds and tests pass successfully after security updates + ## v1.4.393 (2026-01-25) ### PR [#1969](https://github.com/danielmiessler/Fabric/pull/1969) by [ksylvan](https://github.com/ksylvan): Critical and High Impact NPM dependabot issues fixed diff --git a/cmd/fabric/version.go b/cmd/fabric/version.go index 9d037240..576f8d6c 100644 --- a/cmd/fabric/version.go +++ b/cmd/fabric/version.go @@ -1,3 +1,3 @@ package main -var version = "v1.4.393" +var version = "v1.4.394" diff --git a/cmd/generate_changelog/changelog.db b/cmd/generate_changelog/changelog.db index 56dc49f9..4d19bf08 100644 Binary files a/cmd/generate_changelog/changelog.db and b/cmd/generate_changelog/changelog.db differ diff --git a/cmd/generate_changelog/incoming/1971.txt b/cmd/generate_changelog/incoming/1971.txt deleted file mode 100644 index 073e4fb0..00000000 --- a/cmd/generate_changelog/incoming/1971.txt +++ /dev/null @@ -1,7 +0,0 @@ -### PR [#1971](https://github.com/danielmiessler/Fabric/pull/1971) by [ksylvan](https://github.com/ksylvan): Security fix high medium low priority dependabot alerts for npm dependencies - -- Fixed medium severity esbuild vulnerability that allowed websites to send requests to development server and read responses -- Updated esbuild from vulnerable version 0.21.5 to secure version 0.27.2 -- Fixed low severity @eslint/plugin-kit ReDoS vulnerability through ConfigCommentParser -- Updated @eslint/plugin-kit from vulnerable version 0.2.8 to secure version 0.5.1 -- Verified all builds and tests pass successfully after security updates diff --git a/nix/pkgs/fabric/version.nix b/nix/pkgs/fabric/version.nix index 674a768a..64a84b31 100644 --- a/nix/pkgs/fabric/version.nix +++ b/nix/pkgs/fabric/version.nix @@ -1 +1 @@ -"1.4.393" +"1.4.394"