42.57.13

Show maintenance

October 26, 2026

Fixes

Check the origin of requests that use a session cookie4114

Upload routes accepted requests from a session cookie with no cross-site check. Virtool now refuses a request that changes data with a session cookie unless it comes from the same origin. Requests with an API key do not change.

42.65

42.64

42.63

42.62

42.61

42.60

42.59

42.58

42.57

42.56

42.55

42.54

42.53

42.52

42.51

42.50

42.49

42.48

42.47

42.46

42.45

42.44

42.43

42.42

42.41

42.40

42.39

42.38

42.37

42.36

42.35

42.34

42.33

42.32

42.31

42.30

42.29

42.28

42.27

42.26

42.25

42.24

42.23

42.22

42.21

42.20

42.19

42.18

42.17

42.16

42.15

42.14

42.13

42.12

42.11

42.10

42.9

42.8

42.7

42.6

42.5

42.4

42.3

42.2

42.1

42.0

42.57.13

Fixes

Check the origin of requests that use a session cookie4114