Skip to content

Commit 2fb956c

Browse files
authored
Merge pull request #6798 from menloresearch/docs/changelog-v0.7.2
docs: update changelog for Jan v0.7.2
2 parents 418a48a + 4dee0a4 commit 2fb956c

File tree

1 file changed

+25
-0
lines changed

1 file changed

+25
-0
lines changed
Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
---
2+
title: "Jan v0.7.2: Security Update"
3+
version: 0.7.2
4+
description: "Jan v0.7.2 updates the happy-dom dependency to v20.0.0 to address a recently disclosed sandbox vulnerability."
5+
date: 2025-10-16
6+
---
7+
8+
import ChangelogHeader from "@/components/Changelog/ChangelogHeader"
9+
import { Callout } from 'nextra/components'
10+
11+
<ChangelogHeader title="Jan v0.7.2" date="2025-10-16" />
12+
13+
## Jan v0.7.2: Security Update (happy-dom v20)
14+
15+
This release focuses on **security and stability improvements**.
16+
It updates the `happy-dom` dependency to the latest version to address a recently disclosed vulnerability.
17+
18+
### Security Fix
19+
- Updated `happy-dom` to **^20.0.0**, preventing untrusted JavaScript executed within HAPPY DOM from accessing process-level functions and executing arbitrary code outside the intended sandbox.
20+
21+
---
22+
23+
Update your Jan or [download the latest version](https://jan.ai/).
24+
25+
For the complete list of changes, see the [GitHub release notes](https://github.com/janhq/jan/releases/tag/v0.7.2).

0 commit comments

Comments
 (0)