This commit is contained in:
ed 2026-02-25 15:33:12 +00:00
parent a29037a0e2
commit e2ace1dab7
2 changed files with 14 additions and 1 deletions

View file

@ -1,6 +1,6 @@
# coding: utf-8 # coding: utf-8
VERSION = (1, 20, 9) VERSION = (1, 20, 10)
CODENAME = "sftp is fine too" CODENAME = "sftp is fine too"
BUILD_DT = (2026, 2, 25) BUILD_DT = (2026, 2, 25)

View file

@ -1,3 +1,16 @@
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
# 2026-0225-0834 `v1.20.9` SECURITY: XSS fix
## ⚠️ ATTN: this release fixes an XSS vulnerability
[GHSA-62cr-6wp5-q43h](https://github.com/9001/copyparty/security/advisories/GHSA-62cr-6wp5-q43h) could let an attacker execute arbitrary JS by tricking you into clicking a malicious link 31b2801f
## 🔧 other changes
* webdav: [dav-port](https://copyparty.eu/cli/#g-dav-port) can be used as an alternative to [daw](https://copyparty.eu/cli/#g-daw) d21242fc
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀ ▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
# 2026-0222-1507 `v1.20.8` no265 # 2026-0222-1507 `v1.20.8` no265