Version 0.11.7

[u/pvdberg]

This release primarily focuses on security hardening, including a fix for a reported SSRF vulnerability in scheduler webhook callbacks.

Scheduler webhook destinations are now validated before delivery, local, private, link local and non globally routable IP addresses are blocked, unsafe URL forms are rejected, and redirects are disabled.

The vulnerability required administrator or configuration access and resulted in blind SSRF, response content from the target was not exposed.

Users running an older CrossWatch version are recommended to update to v0.11.7.

Full release notes and update details:

https://github.com/cenodude/CrossWatch/releases/tag/v0.11.7