Security Vulnerabilities Watchlist

[mythz]

This thread is for reporting new vulnerabilities found in any officially supported ServiceStack NuGet package.

Subscribe to this thread to get notified of new vulnerabilities. Please use Customer Forums for any questions or discussion.

ServiceStack v8.9

Fixes XSS Vulnerability in HtmlFormat

• affects Auto HTML API in 📦ServiceStack
• affected versions: v6.7-v8.8

ServiceStack v8.7

Fixes vulnerability discovered in management APIs of API Keys Feature

• affects ApiKeysFeature in 📦ServiceStack.Server
• affected versions: v8.3-v8.6

ServiceStack v8.6

Fixes ZDI-CAN-25837 in 📦ServiceStack.Text

• affected versions: *-v8.5

Fixes ZDI-CAN-25834 in 📦ServiceStack.Text

• affected versions: *-v8.5