v0.8.0 v4.13.5

Name: spiderfoot
Author: smicallef

medium risk

smicallef/spiderfootAug 25, 2026 → Aug 26, 20260 days between releases

What's New

The provided release notes describe two different software products (a mouse manager and a web framework), making a direct comparison impossible.

Bug Fixes

Fixes query parser reading parameters after URL fragments
Fixes incomplete CVE-2026-39408 fix for toSSG() path containment
Fixes unbounded dot-notation nesting in parseBody() causing memory exhaustion

Upgrade Notes

Users relying on Cache Middleware, proxies/WAFs, Static Site Generation, or parseBody({ dot: true }) should upgrade to address security vulnerabilities.

The Two Releases

v0.8.0

Aug 25, 2026· 2 months ago

A major version bump introducing a unified device management system, a redesigned GUI, and enhanced input handling.

Full release notes

v4.13.5

Aug 26, 2026· 2 months ago

This release patches multiple security vulnerabilities including a query parser fragment handling issue, a Static Site Generation path containment flaw, and a potential memory exhaustion bug in body parsing.

Full release notes