v4.11.0
tanchongmin/strictjsonv4.11.0Sep 26, 2026by github-actions[bot]
Upgrading?
AI Summary
This release focuses on security hardening across authentication, payment, and session management systems to prevent common vulnerabilities.
Key Highlights
- Hardens OAuth, MFA, CAS, and signup security checks
- Fixes cross-org API permission fallback and restricts ID verification providers
- Blocks Server-Side Request Forgery (SSRF) and forged payment notifications
- Hardens DCR, session rotation, Kerberos, and XSS defenses
Full Release Notes
## Changelog ### Bug fixes * 1278f9dcf4dc6c32c7783e8e2d477686bbe629b9 fix: bind MFA remember to device and block avatar SSRF and forged payment notifies * 617995563e6fcb835c582d644909ff7fd38ec78b fix: block cross-org API permission fallback on empty owner * a0701ad84bd50c5e62fd68807b92923d1991ddac fix: harden DCR, session rotation, Kerberos realm and XSS sinks * 03c6c9aaa2eda5b085ce128ce0d60b34094efbd9 fix: harden OAuth, MFA, CAS and signup security checks * a8f8d5652bec12edf36d9f5f232aae1e8beec715 fix: harden consent, password reset, master code and CAS checks * 8b6360ba95df4119a715bbebfd4a700aa4793c78 fix: restrict ID verification and intranet scan providers to their own organization * 34eec9034f34ca25449e0e3b4683ce98f3faf088 fix: validate order plans and payment providers and block tenant SSRF
Related Repositories
rasbt/LLMs-from-scratch★ 107,043
Implement a ChatGPT-like LLM in PyTorch from scratch, step by step
lyogavin/airllm★ 40,153
AirLLM 2.8T LLM inference with single 4GB GPU
NirDiamant/RAG_Techniques★ 29,958
This repository showcases various advanced techniques for Retrieval-Augmented Generation (RAG) systems. Each technique has a detailed notebook tutorial.
microsoft/OmniParser★ 25,539
A simple screen parsing tool towards pure vision based GUI agent
karpathy/nn-zero-to-hero★ 24,906
Neural Networks: Zero to Hero