Security Review 07/02/2026 - #13

Merged

jkyberneees merged 9 commits into

mainfrom

security-review-1

Feb 7, 2026

Commits on Feb 7, 2026

fix: resolve 43 security vulnerabilities from penetration test
jkyberneees
committed
a46859e
test: add comprehensive test coverage for all 43 security fixes
jkyberneees
committed
5b6feb6
docs: update documentation, type declarations, and exports for security release
jkyberneees
committed
ba36cbf
fix: refactor body-parser extended option semantics and harden prototype pollution protection
jkyberneees
committed
c8651f7
Update lib/middleware/README.md

jkyberneees
and
Copilot
authored
f5d65cd
fix: add cacheSize to IRouterConfig type declaration
jkyberneees
committed
1ad851f
fix: improve rate limiter IP detection with socket.remoteAddress fallback and type declarations
jkyberneees
committed
3947c64
fix: improve LRU cache with refresh-on-access and refactor benchmarks
jkyberneees
committed
5ce4d25
fix: prevent CORS policy header leakage for rejected origins
jkyberneees
committed
2e8f471