hyperf/hyperf v2.1.22

Release v2.1.22

on GitHub

Security

• #3723 Fixed the active_url rule for validation in input fails to correctly check dns record with dns_get_record resulting in bypassing the validation.
• #3724 Fixed bug that RequiredIf can be exploited to generate gadget chains for deserialization vulnerabiltiies.

Fixed

• #3721 Fixed the in and not in rule for validation in input fails to correctly check in:00 rule when passing 0.