v1.4.9
·
4 commits
to master
since this release
6c875f4
This commit was signed with the committer’s verified signature.
mattChiaravalloti
Matthew Chiaravalloti
Version 1.4.9 includes:
- Added logic to clamp large floats when converting to String. (CVE-2026-18888)
- Added logic to clamp name-length in catalog functions. (CVE-2026-19001)
- Added logic to clamp parameter size for client app integrations. (CVE-2026-19002)
- Added logic to clamp DSN path field sizes. (CVE-2026-19003)
- Added logic to clamp buffers. (CVE-2026-19004)