| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| 7.0.14-security source code.tar.gz | 2026-11-02 | 19.5 MB | |
| 7.0.14-security source code.zip | 2026-11-02 | 22.5 MB | |
| README.md | 2026-11-02 | 782 Bytes | |
| Totals: 3 Items | 42.0 MB | 1 | |
Security Patch Release
- Fixed a crash reading AIFF and WAV files with malformed channel counts
- Hardened WAV and AIFF metadata parsing
- Confined ZipFile symbolic links to the target directory and rejected oversized entries
- Fixed ZipFile deleting files outside the target directory through a pre-existing link
- XmlDocument now only loads external entities through a caller-supplied InputSource
- Limited XmlDocument entity expansion and element nesting depth
- Validated the LZW code size in GIF images before decoding
- Validated PNG image dimensions before allocating the decode buffer
- Limited the nesting depth of received OSC bundles
- Limited the nesting depth of parsed JSON objects and arrays
- Limited the nesting depth of ValueTrees read from a stream
