ai/danielmiessler.fabric
1
0
Fork 0
mirror of https://github.com/danielmiessler/fabric.git synced 2026-09-09 23:26:34 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

chore(release): Update version to v1.4.462

Browse source
This commit is contained in:
github-actions[bot] 2026-07-28 15:30:08 +00:00
parent 69dbf44ad1
commit ba6feced62
5 changed files with 9 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
CHANGELOG.md
View file

@ -1,5 +1,12 @@
# Changelog
## v1.4.462 (2026-07-28)
### PR [#2123](https://github.com/danielmiessler/Fabric/pull/2123) by [ksylvan](https://github.com/ksylvan) and [OdinKral](https://github.com/OdinKral): fix: block path traversal in pattern name lookup
- **Security Fix:** Blocked path traversal attacks in pattern name lookup (closes #2094) — pattern names containing `..` could previously escape the patterns directory and read arbitrary files via `filepath.Join`; a guard has been added at the top of `getFromDB`, an i18n key `pattern_invalid_name` has been added to all 11 locale files, and test cases now cover all common traversal variants.
- New translations for the "invalid pattern" user-facing string.
## v1.4.461 (2026-07-28)
### PR [#2152](https://github.com/danielmiessler/Fabric/pull/2152) by [AUTHENSOR](https://github.com/AUTHENSOR): fix: shell-escape extension values to prevent command injection

2
cmd/fabric/version.go
View file

@ -1,3 +1,3 @@
package main
var version = "v1.4.461"
var version = "v1.4.462"

BIN
cmd/generate_changelog/changelog.db
View file

Binary file not shown.

4
cmd/generate_changelog/incoming/2167.txt
View file

@ -1,4 +0,0 @@
### PR [#2123](https://github.com/danielmiessler/Fabric/pull/2123) by [ksylvan](https://github.com/ksylvan) and [OdinKral](https://github.com/OdinKral): fix: block path traversal in pattern name lookup
- **Security Fix:** Blocked path traversal attacks in pattern name lookup (closes #2094) — pattern names containing `..` could previously escape the patterns directory and read arbitrary files via `filepath.Join`; a guard has been added at the top of `getFromDB`, an i18n key `pattern_invalid_name` has been added to all 11 locale files, and test cases now cover all common traversal variants.
- New translations for the "invalid pattern" user-facing string.

2
nix/pkgs/fabric/version.nix
View file

@ -1 +1 @@
"1.4.461"
"1.4.462"