# Security record — Canop/dysk

_Generated 2026-11-03T10:35:22.459Z by fixdossier from GitHub data (releases, tags, security advisories, merged Dependabot/Renovate PRs, commit messages). Automatically compiled; review before relying on it. Not legal advice._

## Summary

| Item | Count |
|---|---|
| Published GitHub security advisories | 0 |
| Commits that look like security fixes | 1 |
| Merged bot dependency updates (security-flagged) | 0 (0) |
| Releases | 52 |
| Fixes not yet in a release | 0 |

## Security fixes (newest first)

| Date | Type | IDs | Fix | Shipped in | Release date | How mapped |
|---|---|---|---|---|---|---|
| 2026-11-02 | commit | — | [fix terminal escape injection from mount metadata](https://github.com/Canop/dysk/commit/726f4f554d7c1ede21363c29b593ab130ca28d86) | v3.8.2 | 2026-11-02 | date heuristic (first release on/after commit) |

## Dependency updates by bots (newest first)

| Merged | Bot | Update | Security? | Shipped in | How mapped |
|---|---|---|---|---|---|
| — | — | None found in the checked range | | | |

## Releases

| Release | Date | Pre-release |
|---|---|---|
| [v3.8.2](https://github.com/Canop/dysk/releases/tag/v3.8.2) | 2026-11-02 |  |
| [v3.8.1](https://github.com/Canop/dysk/releases/tag/v3.8.1) | 2026-10-17 |  |
| [v3.8.0](https://github.com/Canop/dysk/releases/tag/v3.8.0) | 2026-10-17 |  |
| [v3.7.1](https://github.com/Canop/dysk/releases/tag/v3.7.1) | 2026-09-27 |  |
| [v3.7.0](https://github.com/Canop/dysk/releases/tag/v3.7.0) | 2026-09-13 |  |
| [v3.6.1](https://github.com/Canop/dysk/releases/tag/v3.6.1) | 2026-05-04 |  |
| [v3.6.0b](https://github.com/Canop/dysk/releases/tag/v3.6.0b) | 2025-12-23 |  |
| [v3.5.0](https://github.com/Canop/dysk/releases/tag/v3.5.0) | 2025-12-02 |  |
| [v3.4.0](https://github.com/Canop/dysk/releases/tag/v3.4.0) | 2025-11-08 |  |
| [v3.3.0](https://github.com/Canop/dysk/releases/tag/v3.3.0) | 2025-11-02 |  |
| [v3.2.0](https://github.com/Canop/dysk/releases/tag/v3.2.0) | 2025-10-29 |  |
| [v3.1.0](https://github.com/Canop/dysk/releases/tag/v3.1.0) | 2025-08-29 |  |
| [v3.0.0](https://github.com/Canop/dysk/releases/tag/v3.0.0) | 2025-08-18 |  |
| [v2.10.1](https://github.com/Canop/dysk/releases/tag/v2.10.1) | 2025-05-13 |  |
| [v2.10.0](https://github.com/Canop/dysk/releases/tag/v2.10.0) | 2024-12-21 |  |
| [v2.9.1](https://github.com/Canop/dysk/releases/tag/v2.9.1) | 2024-09-08 |  |
| [v2.9.0](https://github.com/Canop/dysk/releases/tag/v2.9.0) | 2024-06-03 |  |
| [v2.8.2](https://github.com/Canop/dysk/releases/tag/v2.8.2) | 2023-10-16 |  |
| [v2.8.1](https://github.com/Canop/dysk/releases/tag/v2.8.1) | 2023-10-09 |  |
| [v2.8.0](https://github.com/Canop/dysk/releases/tag/v2.8.0) | 2023-08-22 |  |
| [v2.7.2](https://github.com/Canop/dysk/releases/tag/v2.7.2) | 2023-08-03 |  |
| [v2.7.1](https://github.com/Canop/dysk/releases/tag/v2.7.1) | 2023-07-16 |  |
| [v2.7.0](https://github.com/Canop/dysk/releases/tag/v2.7.0) | 2023-07-16 |  |
| [v2.6.1](https://github.com/Canop/dysk/releases/tag/v2.6.1) | 2023-07-02 |  |
| [v2.6.0](https://github.com/Canop/dysk/releases/tag/v2.6.0) | 2022-10-19 |  |
| [v2.5.0](https://github.com/Canop/dysk/releases/tag/v2.5.0) | 2022-03-15 |  |
| [v2.4.0](https://github.com/Canop/dysk/releases/tag/v2.4.0) | 2022-03-04 |  |
| [v2.3.1](https://github.com/Canop/dysk/releases/tag/v2.3.1) | 2022-03-01 |  |
| [v2.3.0](https://github.com/Canop/dysk/releases/tag/v2.3.0) | 2022-02-27 |  |
| [v2.2.0](https://github.com/Canop/dysk/releases/tag/v2.2.0) | 2022-02-26 |  |
| [v2.1.1](https://github.com/Canop/dysk/releases/tag/v2.1.1) | 2022-02-25 |  |
| [v2.1.0](https://github.com/Canop/dysk/releases/tag/v2.1.0) | 2022-02-23 |  |
| [v2.0.2](https://github.com/Canop/dysk/releases/tag/v2.0.2) | 2022-02-23 |  |
| [v2.0.1](https://github.com/Canop/dysk/releases/tag/v2.0.1) | 2022-02-20 |  |
| [v2.0.0](https://github.com/Canop/dysk/releases/tag/v2.0.0) | 2022-02-20 |  |
| [v1.4.0](https://github.com/Canop/dysk/releases/tag/v1.4.0) | 2022-01-06 |  |
| [v1.3.1](https://github.com/Canop/dysk/releases/tag/v1.3.1) | 2021-12-26 |  |
| [v1.3.0](https://github.com/Canop/dysk/releases/tag/v1.3.0) | 2021-11-03 |  |
| [v1.2.1](https://github.com/Canop/dysk/releases/tag/v1.2.1) | 2021-10-30 |  |
| [v1.2.0](https://github.com/Canop/dysk/releases/tag/v1.2.0) | 2021-10-19 |  |
| [v1.1.0](https://github.com/Canop/dysk/releases/tag/v1.1.0) | 2021-10-08 |  |
| [v1.0.0](https://github.com/Canop/dysk/releases/tag/v1.0.0) | 2021-09-05 |  |
| [v0.7.6](https://github.com/Canop/dysk/releases/tag/v0.7.6) | 2021-07-08 |  |
| [v0.7.5](https://github.com/Canop/dysk/releases/tag/v0.7.5) | 2021-07-01 |  |
| [v0.7.4](https://github.com/Canop/dysk/releases/tag/v0.7.4) | 2021-07-01 |  |
| [v0.7.3](https://github.com/Canop/dysk/releases/tag/v0.7.3) | 2021-06-30 |  |
| [v0.7.2](https://github.com/Canop/dysk/releases/tag/v0.7.2) | 2021-06-29 |  |
| [v0.7.1](https://github.com/Canop/dysk/releases/tag/v0.7.1) | 2021-06-24 |  |
| [v0.7.0](https://github.com/Canop/dysk/releases/tag/v0.7.0) | 2021-06-23 |  |
| [v0.6.0](https://github.com/Canop/dysk/releases/tag/v0.6.0) | 2021-06-22 |  |

---
Mapping notes: `advisory patched_versions` means each advisory patched range was parsed and matched to the earliest fetched release tag that satisfies it; every matched release is listed. `tag commit match` means the commit SHA or bot PR merge SHA equals the commit a release tag points at (annotated tags use the peeled commit, not the tag object; a short SHA counts only when it is a unique prefix of one tag commit). `date heuristic (first release on/after publish)`, `date heuristic (first release on/after commit)`, and `date heuristic (first release on/after merge)` are the first stable release published on or after that date, used only when the methods above do not match. That heuristic can be wrong for backports and multi-branch repos. Commit detection uses message keywords (CVE-, GHSA-, security, vuln…) and will miss silent fixes and include some false positives. A docs conventional commit (any scope, with or without a colon) is not a fix candidate unless the message cites a CVE or GHSA.
