- Fixed multiple high‑severity vulnerabilities (CVE‑2024‑21892, 2024‑22019, 2024‑21896, 2024‑22017) and several medium‑severity issues.
- Updated core dependencies: OpenSSL 3.0.13+quic1, libuv 1.48.0, undici 5.28.3; disabled io_uring by default and removed PKCS#1 padding for privateDecrypt.
- Hardened filesystem path handling and HTTP parsing, added max chunk‑extension size, and clarified wildcard usage in documentation.