ታዋቂ፦ መረጃው የተዘመነው 27 ኦክቶበር 2026

ምድቦች

ኢንተርኔት1,356
ግንኙነት321
ድምፅ እና ቪዲዮ898
ግራፊክስ እና ዲዛይን539
ቢሮ እና ምርታማነት1,124
የገንቢ መሣሪያዎች3,134
የAI መሣሪያዎች529
ደህንነት እና ግላዊነት385
የሥርዓት መሣሪያዎች3,114
ጨዋታዎች523
ትምህርት እና ሳይንስ239
አውታረ መረብ እና IT284

openapi-oathkeeper፦ ሁሉም ስሪቶች እና የቆዩ ስሪቶች

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

እዚህ 4 የopenapi-oathkeeper ስሪቶች ተዘርዝረዋል፤ ከ19 ማርች 2026 እስከ አሁኑ 0.8.0 ድረስ። እያንዳንዱ ወደ አሳታሚው የራሱ የመጫኛ ፋይሎች ያገናኛል።

2026: 4 4 26
ስሪትቀንመጠንፋይሎች
0.8.0የቅርብ ጊዜ ስሪት 9 ሴፕቴምበር 2026 — 64-bit ZIP32-bit ZIP
የልቀት ማስታወሻዎች
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 7 ሴፕቴምበር 2026 — 64-bit ZIP32-bit ZIP
የልቀት ማስታወሻዎች
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 13 ኦገስት 2026 — 64-bit ZIP32-bit ZIP
0.7.15 19 ማርች 2026 — 64-bit ZIP32-bit ZIP

በቋንቋዎች እና SDK ውስጥ በጣም ታዋቂ

ሁሉንም ይመልከቱ
  1. Go Programming Languageቋንቋዎች እና SDK
  2. LLVMቋንቋዎች እና SDK · LLVM
  3. Denoቋንቋዎች እና SDK · Deno Land Inc.
  4. CMakeቋንቋዎች እና SDK · Kitware
  5. Yarnቋንቋዎች እና SDK · Yarn Contributors
  6. Ccacheቋንቋዎች እና SDK · Joel Rosdahl
  7. sbtቋንቋዎች እና SDK · Lightbend, Inc.
  8. BOINCቋንቋዎች እና SDK · Space Sciences Laboratory, U.C. Berkeley
  9. Dart SDKቋንቋዎች እና SDK · Google
  10. NVM for Windowsቋንቋዎች እና SDK · Ecor Ventures LLC

ተጨማሪ ከCerberAuth

ሁሉንም ይመልከቱ
  • jwtopቋንቋዎች እና SDK · CerberAuth

አጋራ