Skip to content

v3.0.2

Latest
Compare
Choose a tag to compare
@HackbrettXXX HackbrettXXX released this 26 Aug 11:58
543b356

This release fixes a security issue where parsing of corrupt PNG images could lead to long running loops and denial of service.

What's Changed

  • [Snyk] Upgrade @babel/runtime from 7.26.7 to 7.26.9 by @MrRio in #3847
  • Fix parsing corrupt PNG images in addImage method by @HackbrettXXX in #3880. The atob and btoa dependencies have been removed and the fast-png dependency has been added.

New Contributors

Full Changelog: v3.0.1...v3.0.2