warp-tech/warpgate v0.16.0

on GitHub

Security fixes

• 3c003fc - fixed CVE-2025-54804
  • This vulnerability has allowed a malicious authenticated client or target server to trigger a Rust panic in Warpgate and potentially cause a service restart

Major changes

• Docker image : add healthcheck, linting and run as regular user by @hugosxm in #1433
  • The Docker image now runs under UID 1000 instead of 0. Depending on your setup, this might cause permission errors when trying to access the Warpgate data files, you might have to chmod them. Run Docker with --uid 0 to revert to the old, less safe behaviour.
• Added bandwidth limiting support in #1443
  • You can set bandwidth limits globally, per user and per target - works for SSH, MySQL and Postgres targets.

Changes

• Warpgate now sets TCP_NODELAY for better performance - in #1447 and by @tom-90 in #1449

Fixes

• fd6607b - fix channels losing unflushed data when closing
• 4d5ebe4 - fix SCP hangups
• 05235d9 - fixed incorrect relative path resolution in setup
• 5a4b295 - fixed #1424 - OOB UI fails with repeating characters
• version attribute is obsolete by @ulab in #1435
• 8ad6972 - fixed #1442 - unnecessary get_info auth restrictions

New Contributors

• @hugosxm made their first contribution in #1433
• @ulab made their first contribution in #1435
• @tom-90 made their first contribution in #1449

Full Changelog: v0.15.0...v0.16.0