Starstruk Logo MarkStarstruk

v0.8.6

HavocFramework/Havocv0.8.6Sep 3, 2026by svilenmarkov

Upgrading?

What changed from deepagents-talon==0.0.5 → v0.8.6?What's new in v1.12.0 after v0.8.6?

AI Summary

This release addresses a security vulnerability allowing rate-limit bypass via X-Forwarded-For spoofing and fixes various issues across widgets including Reddit, Docker, and Markets. It introduces new helper functions for custom API authentication and enhances caching for the Videos widget.

Key Highlights

  • Fixed critical security vulnerability allowing rate-limit bypass.
  • Resolved issues with Reddit, Hacker News, and Lobsters widget sorting.
  • Added `withAllowInsecure` and `withBasicAuth` functions for custom API.
  • Improved caching for the Videos widget to handle update failures.

New Features

  • Added `withAllowInsecure` function to custom-api
  • Added `withBasicAuth` function to custom-api

Full Release Notes

## Fixed
- Reddit widget not fetching new posts due to challenge page changes
- Unhealthy docker containers not getting identified correctly 
- selfhst icons showing outdated icons
- X-Forwarded-For spoofing which would allow rate-limit bypass for auth
- Misleading currency symbols for some markets in the markets widget
- Incorrect handling of https sock-path in the `docker-containers` widget
- Incorrect sorting for `reddit`, `hacker-news` and `lobsters` widgets with `sort-by: engagement`
- Search bang indicator not getting cleared correctly after pressing `enter`
- Not being able to use the `dns-stats` widget on a Pi-hole instance without a password
- Not being able to use `webp` extension for icons
- RSS feeds not showing correct thumbnails when image URL is a relative path
- Incorrect `manifest.json` path when using `base-url`

## Changes
- Videos widget will now cache and reuse video lists if an update fails for a channel
- Added `withAllowInsecure` function to `custom-api`
- Added `withBasicAuth` function to `custom-api`

Related Repositories

ollama/ollama★ 184,206

Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

fatedier/frp★ 110,051

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

infiniflow/ragflow★ 92,612

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

gohugoio/hugo★ 90,198

The world’s fastest framework for building websites.

junegunn/fzf★ 83,716

:cherry_blossom: A command-line fuzzy finder