Starstruk Logo MarkStarstruk

1.23.10

louislam/uptime-kuma1.23.10Dec 12, 2023by louislam

AI Summary

Security follow-up release that resolves WebSocket origin check issues introduced in 1.23.9, allowing removal of workaround environment variables.

Key Highlights

  • Resolved reverse proxy configuration requirements from 1.23.9
  • Users can now remove UPTIME_KUMA_WS_ORIGIN_CHECK=bypass environment variable
  • Complete fix for GHSA-88j4-pcx8-q4q3

New Features

  • WebSocket security improvement
  • Reverse proxy compatibility restored

Full Release Notes

### ⬆️ Improvements
- #4216 Due to a security patch in 1.23.9, some Uptime Kuma setups behind a reverse proxy required re-configuration.  It is no longer necessary now.
   - If you added `UPTIME_KUMA_WS_ORIGIN_CHECK=bypass` in the previous version, you should remove it to enhance protection, unless you are using some 3rd-party plugins/apps.

### ⬆️ Security Fixes
- #4213 https://github.com/louislam/uptime-kuma/security/advisories/GHSA-88j4-pcx8-q4q3 was not fully patched due to a careless mistake (Thanks @chakflying)