2.1.9

Improvements

• [APPS-1391] Update dependency versions.

Security

• [APPS-1379] - Fix org.apache.tomcat.embed:tomcat-embed-core Uncaught Exception.
• [APPS-1380], [APPS-1381] - Fix org.springframework:spring-webmvc Path Traversal.

2.1.8

Security

• [APPS-1290] - Fix org.bouncycastle:bcprov-jdk18on Infinite loop vulnerability.
• [APPS-1291] - Fix org.apache.tomcat.embed:tomcat-embed-core Insufficient Session Expiration.

2.1.7

Security

• [APPS-1135] - (REST) Fix Denial of Service (DoS) - CVE-2023-1370
• [APPS-1168] - (REST) Fix Open Redirect - CVE-2024-22243
• [APPS-1170] - (REST) Fix Open Redirect - CVE-2024-22259
• [APPS-1171] - (REST) Fix Denial of Service (DoS) - CVE-2024-23672
• [APPS-1172] - (REST) Fix Denial of Service (DoS) - CVE-2024-24549

2.1.6

Security

• [APPS-1108] - Address various vulnerabilities.

2.1.5

Bug Fixes

• [APPS-886] - Swagger API documentation does not display acceptable values for model 'type' fields.
• [APPS-887] - Swagger API documentation does not correctly display the required fields for Operation models.
• [APPS-941] - Fix http2 rapid-reset vulnerability CVE-2023-44487.

2.1.4

Improvements

• [APPS-882] - Clarify how to provide GeoJSON bin types in the documentation.

Bug Fixes

• [APPS-884] - GeoJSON bins are inserted as Aerospike Maps.

2.1.3

Improvements

• [APPS-866] - Upgrade to aerospike-java-client version 7.1.0.

2.1.2

Bug Fixes

• [APPS-833] - Upgrade to aerospike-java-client version 7 (addresses CVE-2023-36480).

2.1.1

Improvements

• [APPS-599] - REST: Add support for MAP_ORDERED and MAP_UNORDERED Map operation return types added in aerospike server 6.3.

Bug Fixes

• [APPS-652] - REST: Using a sindex filter and pagination causes infinite pages to be returned. #124
• [APPS-657] - REST: Support batch requests for server versions 5.x. #118
• [APPS-697] - REST: Address CVE-2023-20860.
• [APPS-730] - REST: Address CVE-2022-1471.

2.0.2

• Renamed package from aerospike-client-rest to aerospike-rest-gateway.

Bug Fixes

• [APPS-336] - REST: Fails to start when aerospike.restclient.requireauthentication=true.