v0.68.1
Billionmail/BillionMailv0.68.1Apr 13, 2026by fatedier
AI Summary
Fixes a critical security vulnerability related to authentication bypass in HTTP proxy configurations when specific routing flags are enabled.
Key Highlights
- Fixed authentication bypass in HTTP proxies
- Proxy-style requests now correctly return 407 on auth failure
- Affects configurations using routeByHTTPUser with httpUser/httpPassword
New Features
- Security patch for proxy authentication
Full Release Notes
## Fixes * Fixed a configuration-dependent authentication bypass in `type = "http"` proxies when `routeByHTTPUser` is used together with `httpUser` / `httpPassword`. This affected proxy-style requests. Proxy-style authentication failures now return `407 Proxy Authentication Required`.