PulseAugur
中
实时 08:17:22
English(EN) HTTP PUT requests that change status now go through the same governance gate as publish, archive, and schedule — invalid states and missing role grants both get

Smeldr 修复了状态治理漏洞，允许未经授权的状态更改

作者 PulseAugur 编辑部 · [2 个来源] ·

Smeldr 已解决其状态治理系统中的一个安全漏洞，该漏洞允许 HTTP PUT 请求绕过转换规则和角色检查。此修复程序仅涉及七行代码更改，确保状态更改现在与发布或存档内容一样，都经过相同的治理网关。此更新还引入了之前缺失的已发布到草稿的转换。 AI

影响 对 AI 运营影响极小；这是一个软件开发修复。

排序理由 该集群描述的是针对特定软件产品的错误修复，而非重大的行业事件。

在 Mastodon — fosstodon.org 阅读 →

AI 生成摘要 · Google Gemini · 来自 2 个来源。 我们如何撰写摘要 →

Smeldr 修复了状态治理漏洞，允许未经授权的状态更改

本文如何被排名

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
该集群描述的是针对特定软件产品的错误修复，而非重大的行业事件。
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
Low
Off-topic or adjacent — cluster remains reachable but doesn't surface in AI-industry rankings.
Story freshness
12 days old
Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

完整方法见我们的编辑标准。

报道来源 [2]

  1. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    更改状态的 HTTP PUT 请求现在通过与发布、存档和计划相同的治理网关——无效状态和缺失的角色授予都会得到处理

    HTTP PUT requests that change status now go through the same governance gate as publish, archive, and schedule — invalid states and missing role grants both get rejected. The default flow also gained a published-to-draft transition it was missing. https:// smeldr.dev/devlog/t150-…

    链接 smeldr.dev/…/t150-update-handler-state-go…
  2. Mastodon — mastodon.social TIER_1 English(EN) · smeldr ·

    Smeldr 州治理中发现一个隐蔽漏洞：HTTP PUT 请求可更改任何内容项至任何状态，绕过所有过渡规则和角色检查

    Found a quiet gap in Smeldr's state governance: HTTP PUT requests could change any content item to any status, bypassing every transition rule and role check the lifecycle methods enforce. Seven-line fix, closed now. https:// smeldr.dev/devlog/t150-update- handler-state-governanc…

    链接 smeldr.dev/…/t150-update-handler-state-go…

相关实体

相关话题