Marco Arnulfo e61e328edb io: read SVG element and attribute names with quick-xml 0.42

2026-10-23 08:50:32 +02:00

..

color

Reject non-hex characters such as '+' in Rgb::parse_hex (#1601)

2026-10-19 02:33:35 -04:00

constraints

docs: clarify security regression guarantees

2026-10-23 02:14:11 +02:00

doc

security: bound drawing document-model work and allocation (CWE-400/407) (#1850)

2026-10-22 17:08:02 -04:00

dwg

docs: document security limits and regression guarantees

2026-10-23 01:59:55 +02:00

dxf

DXF: read pre-2007 files in their $DWGCODEPAGE (CJK, Cyrillic, Central European…) (fixes #505) (#511)

2026-10-11 11:47:42 -04:00

engine

chore(deps): bump the cargo-dependencies group across 1 directory with 17 updates (#1957)

2026-10-22 23:54:32 -04:00

fonts

fonts: port complex-text shaping to harfrust 0.14

2026-10-23 08:44:31 +02:00

geom

security: bound geometry-kernel degree and work (CWE-407) (#1848)

2026-10-22 17:05:16 -04:00

io

io: read SVG element and attribute names with quick-xml 0.42

2026-10-23 08:50:32 +02:00

mcp

chore(deps): bump the cargo-dependencies group across 1 directory with 17 updates (#1957)

2026-10-22 23:54:32 -04:00

render

docs: clarify security regression guarantees

2026-10-23 02:14:11 +02:00

ui-egui

security: submit XATTACH picked path as literal text, not a command line (CWE-74) (#1843)

2026-10-22 18:19:13 -04:00