Unverified50% confidenceReleaseExact time
server-everything 2.1.0 fixed the aggregation logic of elicitation requests over the form's own fields; gzip-file-as-resource now fails correctly when it receives an HTTP error response and rejects non-public addresses at every hop; get-env masks credential-like values by default; and corrupted iCCP chunks were removed from the PNG in get-tiny-image.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/28/2026
First Seen
Valid until: 1/26/2027
Sources
Related Entities
Related Claims
UnverifiedEverything server 2.0.1 fixes an issue where the HTTP and SSE transports accepted requests from arbitrary web origins and returned Access-Control-Allow-Origin: * (GHSA-mvf5-2qqv-rg3c).70% similarUnverifiedThe key change in @ai-sdk/svelte@5.0.92 comes from commit d1904d3, with the fix described as "expose fallback error message for empty HTTP response bodies".67% similarUnverifiedZapier's native integration wraps Clearbit enrichment failures into invisible internal errors, whereas n8n's HTTP Request node allows custom status code checks, which is the technical reason the two diverge on reliability.63% similarUnverifiedThe v3.19.1 fix (#3486) resolves at the client level an issue where HTTP header merging was not handled in a case-insensitive manner.62% similarUnverifiedFingerprint collection occurs in server-side logic during HTTP request processing and does not rely on client-side storage APIs; therefore, storage isolation strategies such as Safari's ITP and Firefox's ETP have almost no effect on blocking it.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1109564API
curl https://kongchang.com/api/v1/knowledge/claims/1109564MCP
get_claim(id=1109564)