releases.shpreview

v3.19.7

$npx -y @buildinternet/releases show rel_ON6QaqzA2tpoU-KWUal-5

Estimated end-of-life date, accurate to within three months: 08-2026 See the support level definitions for more information.

Bug Fixes

  • AAP: Fixes a memory corruption issue where concurrent calls to the WAF on the same request context from multiple threads (e.g. an asyncio event loop and a thread pool executor inheriting the same context via contextvars) could cause use-after-free or double-free crashes (SIGSEGV) inside libddwaf. A per-context lock now serializes WAF calls on the same context.

Fetched March 26, 2026