Version 1.9.x

 V1.9.2

2026-08-06

Server Core

  • [Improvement] Strengthen HTTP/2/HTTP/3 header validation.
  • [Improvement] Improve node application process management.
  • [Update] lsquic to v4.9.3.
  • [Feature] Add support for MKCALENDAR request method.
  • [Feature] Add built-in ACME support for auto SSL certificate fetching.

 

 V1.9.1

2026-06-30

Server Core

  • [Security] Thorough general code hardening.
  • [Security] HTTP2/HTTP3 protocol hardening.
  • [Improvement] Switch regular expression engine from PCRE to PCRE2.
  • [Bug Fix] Address issues in new webadmin.
  • [Bug Fix] Address issues in ACME Auto Cert.
  • [Bug Fix] Address issues in namespace.

 

 V1.9.0

2026-04-22

Server Core

  • [Security] Address remote exploit vulnerabilities in HTTP/3 engine.
  • [Security] Address request smuggling issue for HTTP/2.
  • [Security] Add `UnsafeAllow3F` rewrite rule flag to address unsafe `%3f` encoded URLs.
  • [Feature] Add new WebAdmin UI.
  • [Feature] Add built-in ACME support for auto SSL certificate fetching.
  • [Feature] Add support for SCGI and uWSGI backends.
  • [Feature] Drop SPDY protocol support.
  • [Bug fix] Address various corner cases in AIO, cache module, and Node.js support.