From 98ac26bf706b576036d57d0cfd4d4f721f61d173 Mon Sep 17 00:00:00 2001 From: joshua Date: Thu, 27 Aug 2026 09:35:58 +0200 Subject: [PATCH] Bump version to 1.9.5 --- CHANGELOG.md | 2 ++ backend/package.json | 2 +- frontend/package.json | 2 +- package.json | 2 +- 4 files changed, 5 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 27ebe5d..4748adb 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,8 @@ and this project follows [Semantic Versioning](https://semver.org/). ## [Unreleased] +## [1.9.5] - 2026-08-27 + ### Fixed - The public event-alias route (`/:redirectUrl`, used for short links like `/camp-2025`) is a catch-all matching any unmatched top-level path, so every bot/scanner probe for a nonexistent page (`/wp-login.php`, `/.env`, etc.) was hitting the backend and firing a live database query. Both the frontend route and the `GET /api/events/by-alias/:redirectUrl` endpoint now reject anything that isn't a plausible alias (letters/numbers/hyphens/underscores) before touching the database, instead of forwarding scanner noise straight through — this traffic pattern could exhaust the database connection pool and take the server down under load. diff --git a/backend/package.json b/backend/package.json index 97e5af5..e1717d7 100644 --- a/backend/package.json +++ b/backend/package.json @@ -1,6 +1,6 @@ { "name": "event-management-backend", - "version": "1.9.4", + "version": "1.9.5", "description": "Event Management System Backend", "main": "src/index.js", "scripts": { diff --git a/frontend/package.json b/frontend/package.json index b349eca..10442b4 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -1,6 +1,6 @@ { "name": "hope-events-frontend", - "version": "1.9.4", + "version": "1.9.5", "private": true, "scripts": { "dev": "next dev --turbopack", diff --git a/package.json b/package.json index 2b96564..8ceb6ce 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "hope-events", - "version": "1.9.4", + "version": "1.9.5", "main": "index.js", "scripts": { "dev:backend": "cd backend && npm run dev",