Starstruk Logo MarkStarstruk

v0.68.1

labring/sealosv0.68.1Apr 13, 2026by fatedier

AI Summary

This release fixes a critical security vulnerability involving an authentication bypass in HTTP proxies when using `routeByHTTPUser` with credentials.

Key Highlights

  • Fixed authentication bypass in HTTP proxies
  • Corrected behavior for `routeByHTTPUser` with `httpUser`/`httpPassword`
  • Proxy authentication failures now return 407 status code

Full Release Notes

## Fixes

* Fixed a configuration-dependent authentication bypass in `type = "http"` proxies when `routeByHTTPUser` is used together with `httpUser` / `httpPassword`. This affected proxy-style requests. Proxy-style authentication failures now return `407 Proxy Authentication Required`.