Skip to content

Commit 2d90287

Browse files
committed
docs: update changelog for Jan v0.7.2
1 parent 418a48a commit 2d90287

File tree

1 file changed

+29
-0
lines changed

1 file changed

+29
-0
lines changed
Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
---
2+
title: "Jan v0.7.2: Security Update (happy-dom v20)"
3+
version: 0.7.2
4+
description: "Jan v0.7.2 updates the happy-dom dependency to v20.0.0 to address a recently disclosed sandbox vulnerability."
5+
date: 2025-10-16
6+
---
7+
8+
import ChangelogHeader from "@/components/Changelog/ChangelogHeader"
9+
import { Callout } from 'nextra/components'
10+
11+
<ChangelogHeader title="Jan v0.7.2" date="2025-10-16" />
12+
13+
## Jan v0.7.2: Security Update (happy-dom v20)
14+
15+
This release focuses on **security and stability improvements**.
16+
It updates the `happy-dom` dependency to the latest version to address a recently disclosed vulnerability.
17+
18+
### Security Fix
19+
- Updated `happy-dom` to **^20.0.0**, preventing untrusted JavaScript executed within HAPPY DOM from accessing process-level functions and executing arbitrary code outside the intended sandbox.
20+
21+
### Stability
22+
- Verified across **macOS**, **Windows**, and **Linux**.
23+
- No new features introduced — this update should not cause any behavioral changes.
24+
25+
---
26+
27+
Update your Jan or [download the latest version](https://jan.ai/).
28+
29+
For the complete list of changes, see the [GitHub release notes](https://github.com/janhq/jan/releases/tag/v0.7.2).

0 commit comments

Comments
 (0)