v1.1.1

Changed

• Library updates to address Regular Expression Denial of Service (ReDoS) in cross-spawn

v1.1.0

Changed

• Replacing CodeCommit with S3 bucket as source code respository for network firewall configurations.

v1.0.8

Changed

• Library updates to address path-to-regexp outputs backtracking regular expressions
• Library updates to address AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
• Library updates to address micromatch: vulnerable to Regular Expression Denial of Service

v1.0.7

Changed

• Library updates to address axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs.

v1.0.6

[1.0.6] - 2024-07

• Bump up minor versions of dependencies
• Library updates to address braces: fails to limit the number of characters it can handle

v1.0.5

[1.0.5] - 2024-05

• Rename the solution to Centralized Network Inspection on AWS
• Bump up minor versions of dependencies

v1.0.4

[1.0.4] - 2023-11-10

• Update NodeJS environment for CodeBuild from NodeJS16 to NodeJS18.

v1.0.3

[1.0.3] - 2023-10-27

Changed

• Library updates to address Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
• Library updates to address xml2js vulnerable to improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

v1.0.2

[1.0.2] - 2022-12-19

Updated

• Name change to Firewall Automation for Network Traffic on AWS
• Upgrade to CDK v2
• Fix NPM security warnings
• Fix SonarQube bugs and increase unit test coverage

v1.0.1

Updated

• Updated default branch name to 'main'. Change branch settings in your
  existing AWS CodeCommit repository.

Refer to changelog for more information.