Skip to content

Fix CVE-2026-111497 and v3.0.0 default value handling - #2201

Open
cedric-mertig wants to merge 6 commits into
lowcoder-org:devfrom
cedric-mertig:release/3.0.x
Open

cedric-mertig wants to merge 6 commits into
lowcoder-org:devfrom
cedric-mertig:release/3.0.x

Conversation

@cedric-mertig

@cedric-mertig cedric-mertig commented Oct 31, 2026 •

Copy link
Copy Markdown

pin Node 22.23.4/26.12.1, nginx 1.30.6

@cedric-mertig

cedric-mertig commented Nov 4, 2026 •

Copy link
Copy Markdown
Author

fix various v3.0.0 default value handling issues

  • fix: the default value is no longer overwritten with an empty value when the app reevaluates after loading (for example when a query finishes)
  • fix: resetValue() (resetStart()/resetEnd() for ranges) now sets the value to the default. Also applies to form1.reset() indirectly
  • fix: setDefaultValue, clearDefaultValue now also has an effect on the value. Side effect is that running a query after user input no longer resets said user input as long as the query returns the same data as before

Applies to Components:

  • Select
  • Multiselect
  • Radio
  • Checkbox
  • Segmented Control
  • Input
  • Password
  • Text Area
  • Mention
  • Number Input
  • Rating
  • Switch
  • Date
  • Date Range
  • Time
  • Time Range

The build images can be found under their tag in my gitlab fork, for example for lowcoder-ce here:
registry.gitlab.com/red-claw-gmbh/lowcoder/lowcoder-ce:3.0.0_hotfix.2

@cedric-mertig cedric-mertig changed the title Fix CVE-2026-111497: pin Node 22.23.4/26.12.1, nginx 1.30.6 Fix CVE-2026-111497 and v3.0.0 default value handling Nov 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant