Doezer/Questarr v1.2.2

v1.2.2 - Security update

on GitHub

Routine security check, no severe fix in this release.
Disclosure: AI was used to finalize these very simple fixes (Aikido security service & Claude Opus 4.6)

Docker images

• GitHub Registry
• Docker Hub

What's Changed

• [Aikido] AI Fix for 3rd party Github Actions should be pinned by @aikido-autofix[bot] in #419
• Dependencies updates (dependabot auto updates)
• [Aikido] Fix security issue in fast-xml-parser via minor version upgrade from 5.3.5 to 5.3.7 by @aikido-autofix[bot] in #416
• [Aikido] AI Fix for HTTP request might enable SSRF attack by @aikido-autofix[bot] in #418
• [Aikido] AI Fix for Docker container runs as default root user by @aikido-autofix[bot] in #417

Addressed Vulnerabilities

• fast-xml-parser 5.3.5 → 5.3.7 — fixes CVE-2026-26278 (GHSA-jmr7-xgp7-cmfj, HIGH) — DoS via entity expansion in DOCTYPE (no expansion limit).

Full Changelog: v1.2.1...v1.2.2