Post

And they've just released Bun 1.4.4 to resolve the most important issues.

Right now Bun / Anthropic are being deeply irresponsible. They've landed fixes on main for the QUIC, eMudhra and TLS validation vulnerabilities, and the Brotli fix is just updating a dependency. They need to ship and fix the worst vulnerabilities now, then ship a follow up with the rest.

22/10/26, 10:56 am0 reposts0 likes

Ant Stanley

@iamstan.dev

... but they didn't release a changelog that accurately details the security fixes for the new release, so I got DeepSeek to create one. github.com/antstanley/b... Outstanding security fixes in flight vs what landed in 1.4.4