Starstruk Logo MarkStarstruk

v3.4.8

diegosouzapw/OmniRoutev3.4.8Apr 3, 2026by diegosouzapw

AI Summary

A security-focused patch addressing all GitHub Advanced Security findings, fixing randomization vulnerabilities, and hardening shell commands.

Key Highlights

  • Remediated all CodeQL and Dependabot alerts
  • Replaced Math.random with crypto.randomUUID()
  • Hardened shell commands and regex parsing

New Features

  • Security hardening (randomness, shell, regex, sanitization)

Full Release Notes

### Security

- Fully remediated all outstanding Github Advanced Security (CodeQL) findings and Dependabot alerts.
- Fixed insecure randomness vulnerabilities by migrating from `Math.random` to `crypto.randomUUID()`.
- Secured shell commands in automated scripts from string injection.
- Migrated vulnerable catastrophic backtracking RegEx parsing patterns in chat/translation pipelines.
- Enhanced output sanitization controls inside React UI components and Server Sent Events (SSE) tag injection.