Security Release
Breaking Changes
None
Fixes
- IP Restriction Middleware: Fixed IPv4 validation bypass that could circumvent IP-based access control (CVE-2026-24398)
- Cache Middleware: Fixed caching of responses with
Cache-Control: privateorno-storeheaders, preventing information disclosure (CVE-2026-24472) - Serve Static Middleware (Cloudflare Workers): Fixed arbitr...