Dylan M. Taylor 8c45a8dd5b Merge pull request #3937 from dylanmtaylor/security/review-findings-pathops ...

Security: planar map budgets for booleans, Live Paint, Offset Path and 3D effects

2026-10-25 16:46:05 -04:00

..

affinity

…

brush

…

cad

Keep escaped backslash literal before U+XXXX in DXF MTEXT

2026-10-24 20:54:42 +07:00

color

Color management: loading the working RGB profile again under its name takes effect at once

2026-10-24 19:36:34 +02:00

doc

Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888)

2026-10-25 12:32:45 -04:00

effects

…

engine

security(pathops): signed zeros, reported budget rejections, and a fill-only fallback

2026-10-25 16:04:29 -04:00

eps

Security: EPS and legacy Illustrator bounds (operator recursion, bind, copy, cvn, previews, writer output, ink name) (#3883)

2026-10-25 12:32:14 -04:00

format

Reject misplaced or excess '=' padding in base64_decode

2026-10-25 12:00:58 +00:00

geom

…

mcp

Merge pull request #4068 from dotCooCoo/fix/eps-no-art-central-file-text

2026-10-25 10:38:12 -04:00

metafile

…

pathops

security(pathops): count the sweep budget on the snapped geometry

2026-10-25 16:08:06 -04:00

pdf

Docking: panels on craft-ui's shared docking, floating panels in OS windows (#4135)

2026-10-25 15:25:35 -04:00

plugins

…

render

Renderer tests: the Arabic alternate-glyph tests take the font lock

2026-10-24 23:49:34 +07:00

scriptcheck

fix(scriptcheck): settle what variables hold without a loader too

2026-10-24 21:10:06 +07:00

svg

Require two hex digits in SVG href percent escapes

2026-10-24 23:32:52 +07:00

testkit

…

text

Type: threaded frames do not repeat a continued paragraph's first-line indent or list marker

2026-10-24 21:43:44 +07:00

three-d

Security: planar map budgets for booleans, Live Paint, Offset Path and 3D effects

2026-10-25 15:42:41 -04:00

tools

Merge pull request #4113 from storytold/codex/egui-037-vectorcraft-20261023

2026-10-25 14:09:31 -04:00

trace

Merge pull request #4077 from dotCooCoo/fix/trace-palette-drops-unused-colors

2026-10-25 10:38:08 -04:00

ui-egui

feat: startup update prompt modal and direct self-updating (#4138)

2026-10-25 16:22:52 -04:00