docs: update changelog for Jan v0.7.2
This commit is contained in:
parent
418a48ab39
commit
4dee0a4ba1
25
docs/src/pages/changelog/2025-10-16-jan-security-update.mdx
Normal file
25
docs/src/pages/changelog/2025-10-16-jan-security-update.mdx
Normal file
@ -0,0 +1,25 @@
|
||||
---
|
||||
title: "Jan v0.7.2: Security Update"
|
||||
version: 0.7.2
|
||||
description: "Jan v0.7.2 updates the happy-dom dependency to v20.0.0 to address a recently disclosed sandbox vulnerability."
|
||||
date: 2025-10-16
|
||||
---
|
||||
|
||||
import ChangelogHeader from "@/components/Changelog/ChangelogHeader"
|
||||
import { Callout } from 'nextra/components'
|
||||
|
||||
<ChangelogHeader title="Jan v0.7.2" date="2025-10-16" />
|
||||
|
||||
## Jan v0.7.2: Security Update (happy-dom v20)
|
||||
|
||||
This release focuses on **security and stability improvements**.
|
||||
It updates the `happy-dom` dependency to the latest version to address a recently disclosed vulnerability.
|
||||
|
||||
### Security Fix
|
||||
- Updated `happy-dom` to **^20.0.0**, preventing untrusted JavaScript executed within HAPPY DOM from accessing process-level functions and executing arbitrary code outside the intended sandbox.
|
||||
|
||||
---
|
||||
|
||||
Update your Jan or [download the latest version](https://jan.ai/).
|
||||
|
||||
For the complete list of changes, see the [GitHub release notes](https://github.com/janhq/jan/releases/tag/v0.7.2).
|
||||
Loading…
x
Reference in New Issue
Block a user