Të kërkuara: Të dhënat u përditësuan më 27 tetor 2026

Kategoritë

Internet1356
Komunikim321
Audio dhe video898
Grafikë dhe dizajn539
Zyrë dhe produktivitet1124
Mjete zhvillimi3134
Mjete IA529
Siguri dhe privatësi385
Mjete sistemi3114
Lojëra523
Arsim dhe shkencë239
Rrjet dhe IT284

openapi-oathkeeper: versionet e vjetra dhe historiku

Generate Ory Oathkeeper access rules from an OpenAPI 3 contract.

Këtu janë renditur 4 versione të openapi-oathkeeper, nga 19 mars 2026 deri te versioni aktual 0.8.0. Secili të çon te skedarët e instalimit të vetë botuesit.

2026: 4 4 26
VersioniDataMadhësiaSkedarët
0.8.0I fundit 9 shtator 2026 — 64-bit ZIP32-bit ZIP
Shënimet e versionit
## What's Changed

• Add integration tests by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/143
• feat:update dependencies and image version by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/144
• Capture array and object path params as explicit types by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/145

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.19...v0.8.0
0.7.19 7 shtator 2026 — 64-bit ZIP32-bit ZIP
Shënimet e versionit
## Security fix

**High severity:** Overbroad path-parameter regex in generated Ory Oathkeeper access rules could cause an authentication/authorization bypass.

Previously, every OpenAPI `string` path parameter (and any parameter type the generator couldn't classify) was compiled to the unanchored regex token `<.+>`. Because `.` matches `/` in Go's regexp engine — and in Ory Oathkeeper's `regexp` matching strategy — a rule generated for a single path segment (e.g. `/public/{slug}`) also matched deeper, unrelated paths under the same prefix (e.g. `/public/admin/delete-all-users`). If those deeper paths weren't defined as their own, more specific OpenAPI operations, the broader (often unauthenticated `noop`) rule would match and proxy them instead of being rejected.

Generated rules for `string` and unclassified path parameters now use `<[^/]+>`, anchored to a single URL segment, matching the behavior already documented for numeric parameters.

**Action required:** Regenerate your Ory Oathkeeper access rules with this version and redeploy them. Rules generated by earlier versions using `string` path parameters may be broader than intended.

See [GHSA-9f3w-vm54-7gfc](https://github.com/cerberauth/openapi-oathkeeper/security/advisories/GHSA-9f3w-vm54-7gfc) for full details. Thanks to @EQSTLab for the responsible disclosure.

## What's Changed

• fix(generator):anchor string path-parameter regex to a single URL segment by @emmanuelgautier in https://github.com/cerberauth/openapi-oathkeeper/pull/142

**Full Changelog**:https://github.com/cerberauth/openapi-oathkeeper/compare/v0.7.18...v0.7.19
0.7.18 13 gusht 2026 — 64-bit ZIP32-bit ZIP
0.7.15 19 mars 2026 — 64-bit ZIP32-bit ZIP

Më të njohurat në „Gjuhë dhe SDK”

Shiko të gjitha
  1. LLVMGjuhë dhe SDK · LLVM
  2. DenoGjuhë dhe SDK · Deno Land Inc.
  3. CMakeGjuhë dhe SDK · Kitware
  4. YarnGjuhë dhe SDK · Yarn Contributors
  5. CcacheGjuhë dhe SDK · Joel Rosdahl
  6. sbtGjuhë dhe SDK · Lightbend, Inc.
  7. BOINCGjuhë dhe SDK · Space Sciences Laboratory, U.C. Berkeley
  8. Dart SDKGjuhë dhe SDK · Google
  9. NVM for WindowsGjuhë dhe SDK · Ecor Ventures LLC

Të tjera nga CerberAuth

Shiko të gjitha
  • jwtopGjuhë dhe SDK · CerberAuth

Ndaje