v1.4.395

danielmiessler/Fabricv1.4.395Jan 25, 2026by github-actions[bot]

AI Summary

Security-focused release that removed vulnerable npm packages and fixed multiple Dependabot alerts including ReDoS and SSRF vulnerabilities.

Key Highlights

  • Removed cn (Chuck Norris jokes) package to resolve security vulnerabilities
  • Fixed 5 Dependabot alerts including ReDoS vulnerabilities in string package
  • Fixed SSRF/Remote Memory Exposure issues in request package
  • Enhanced security posture by eliminating vulnerable dependencies

New Features

  • Security vulnerability fixes
  • Dependency cleanup

Full Release Notes

## Changes

### PR [#1972](https://github.com/danielmiessler/Fabric/pull/1972) by [ksylvan](https://github.com/ksylvan): More node package updates: remove cn, fix string and request vulnerabilities

- Removed cn (Chuck Norris jokes) package to resolve security vulnerabilities
- Fixed 5 Dependabot alerts including ReDoS vulnerabilities in string package and SSRF/Remote Memory Exposure issues in request package
- Enhanced security posture by eliminating vulnerable dependencies with no available patches