Download Latest Version v0.15.1 source code.zip (3.8 MB)
Email in envelope

Get an email when there's a new version of Stoat

Home / v0.15.0
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-08-07 1.1 kB
v0.15.0 source code.tar.gz 2026-08-07 3.5 MB
v0.15.0 source code.zip 2026-08-07 3.8 MB
Totals: 3 Items   7.3 MB 0

0.15.0 (2026-08-05)

Features

Bug Fixes

  • rewrite youtube embedder to use youtube oembed (#878) (0369451)

Security Fixes

  • Fetching a single message checks only ViewChannel, not ReadMessageHistory (GHSA-8qp4-h9xf-2vqr)
  • Missing authorization on Bonfire Subscribe — cross‑server member enumeration & profile/status surveillance (ban‑evasion) (GHSA-jj3j-9qr7-jgfc)
  • Unauthenticated SSRF via IPv6 unspecified address (::) bypass (GHSA-4rmr-77qv-hq47)
  • Uncapped SVG rendering in January (GHSA-x87r-h3mq-7mgr)
Source: README.md, updated 2026-08-07