Static Web Server Files

This new patch v2.40.1 release brings important security bug fixes for users serving directories with symbolic links (symlinks) as well as other minor improvements.

Security vulnerability patch

This particular release patches a Symbolic link path traversal vulnerability (https://github.com/static-web-server/static-web-server/security/advisories/GHSA-459f-x8vq-xjjm) Any web server that runs with elevated privileges (e.g., root/administrator) and handles user-supplied file uploads is primarily impacted.

We encourage users to update as soon as possible.

Fixes

• 9b7297c Update dependencies like async-compression, log, libc and others. [#599] by @joseluisq
• 308f0d2 Fix incorrect symbolic link handling by @joseluisq

Refactorings

• ce3a51c CI: Dedicated workflow for project documentation checks. [#596] by @joseluisq
• dd43d06 Misc: Markdown format check support for project documentation. [#597] by @mschoettle

For more details see the v2.40.1 milestone and the full changelog v2.40.0...v2.40.1.