Vinsælt: Gögn uppfærð 27. október 2026

Flokkar

Internet1.356
Samskipti321
Hljóð og mynd898
Grafík og hönnun539
Skrifstofa og afköst1.124
Forritunartól3.134
Gervigreindartól529
Öryggi og persónuvernd385
Kerfistól3.114
Leikir523
Menntun og vísindi239
Net og upplýsingatækni284

openapi-oathkeeper: allar útgáfur og eldri útgáfur

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

Hér eru skráðar 4 útgáfur af forritinu openapi-oathkeeper, frá 19. mars 2026 til núverandi útgáfu 0.8.0. Hver þeirra vísar á uppsetningarskrár útgefandans sjálfs.

2026: 4 4 26
ÚtgáfaDagsetningStærðSkrár
0.8.0Nýjasta 9. september 2026 — 64 bita ZIP32 bita ZIP
Útgáfuupplýsingar
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 7. september 2026 — 64 bita ZIP32 bita ZIP
Útgáfuupplýsingar
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 13. ágúst 2026 — 64 bita ZIP32 bita ZIP
0.7.15 19. mars 2026 — 64 bita ZIP32 bita ZIP

Vinsælast í flokknum Forritunarmál og SDK

Sjá allt
  1. Go Programming LanguageForritunarmál og SDK
  2. LLVMForritunarmál og SDK · LLVM
  3. DenoForritunarmál og SDK · Deno Land Inc.
  4. CMakeForritunarmál og SDK · Kitware
  5. YarnForritunarmál og SDK · Yarn Contributors
  6. CcacheForritunarmál og SDK · Joel Rosdahl
  7. sbtForritunarmál og SDK · Lightbend, Inc.
  8. BOINCForritunarmál og SDK · Space Sciences Laboratory, U.C. Berkeley
  9. Dart SDKForritunarmál og SDK · Google
  10. NVM for WindowsForritunarmál og SDK · Ecor Ventures LLC

Meira frá CerberAuth

Sjá allt
  • jwtopForritunarmál og SDK · CerberAuth

Deila