Skip to content

2.2.1 Maintenance Release

Latest

Choose a tag to compare

@andrew-coleman andrew-coleman released this 19 May 10:56
06fc08c

This release predominantly contains security related fixes and enhancements, in particular to address https://nvd.nist.gov/vuln/detail/CVE-2026-12208

  • Prevent object prototype pollution (PR #799)
  • Wildcards should not unwrap function objects (PR #800)
  • $append should enforce the sequence guardrail limit (PR #801)
  • Prevent object contructor setting internal flags (PR #802)