Skip to content

IdentityServer8 Release 8.0.4

Latest
Compare
Choose a tag to compare
@alexhiggins732 alexhiggins732 released this 17 Feb 08:45
· 2 commits to master since this release
b0d1155

[8.0.4] - 2024-02-17

Identity Server 8.0.4 is a security release that addresses hundreds of security vulnerabilities in the IdentityServer8 code base. We recommend that you update to this version.

  • Fix over 100+ security vulnerabilities in the IdentityServer8 code base:
  • #17 Unsafe expansion of self-closing HTML tag
  • #18 URL redirection from remote source
  • #19 DOM text reinterpreted as HTML
  • #20 Incomplete string escaping or encoding
  • #21 Inefficient regular expression bug dependencies
  • #22 Bad HTML filtering regexp bug dependencies
  • #23 User-controlled bypass of sensitive method bug
  • #24 Unsafe jQuery plugins bug dependencies

What's Changed

Full Changelog: 8.0.2...8.0.4