matterbridge 3.0.1-dev-20250502-c002841 → 3.0.1-dev-20250503-71b796a

package/CHANGELOG.md

@@ -29,6 +29,10 @@ It is also available the official Matterbridge Home Assistant plugin https://git
 - [docker]: Updated the [Docker configurations](README-DOCKER.md).
 - [frontend]: Changing configuration for a plugin now only lock configuration on that plugin.
 
+### Fixed
+
+- [BasicInformation]: Fixed vulnerability to BasicInformation and BridgedDeviceBasicInformation cluster initialization attributes.
+
 ## [3.0.0] - 2025-04-29
 
 ## Breaking changes

package/dist/frontend.js

@@ -1013,8 +1013,9 @@ export class Frontend {
                 this.wssSendSnackbarMessage('Backup ready to be downloaded', 10);
             }
             else if (data.method === '/api/unregister') {
-                this.wssSendSnackbarMessage('Uregistering all bridged devices...', 10);
+                this.wssSendSnackbarMessage('Unregistering all bridged devices...', 0);
                 await this.matterbridge.unregisterAndShutdownProcess();
+                this.wssSendCloseSnackbarMessage('Unregistering all bridged devices...');
             }
             else if (data.method === '/api/reset') {
                 this.wssSendSnackbarMessage('Resetting matterbridge commissioning...', 10);

package/dist/matterbridge.js

@@ -5,14 +5,14 @@ import EventEmitter from 'node:events';
 import { inspect } from 'node:util';
 import { AnsiLogger, UNDERLINE, UNDERLINEOFF, YELLOW, db, debugStringify, BRIGHT, RESET, er, nf, rs, wr, RED, GREEN, zb, CYAN } from './logger/export.js';
 import { NodeStorageManager } from './storage/export.js';
-import { getParameter, getIntParameter, hasParameter, copyDirectory, withTimeout, waiter, isValidString, parseVersionString } from './utils/export.js';
+import { getParameter, getIntParameter, hasParameter, copyDirectory, withTimeout, waiter, isValidString, parseVersionString, isValidNumber } from './utils/export.js';
 import { logInterfaces, getGlobalNodeModules } from './utils/network.js';
 import { PluginManager } from './pluginManager.js';
 import { DeviceManager } from './deviceManager.js';
 import { MatterbridgeEndpoint } from './matterbridgeEndpoint.js';
 import { bridge } from './matterbridgeDeviceTypes.js';
 import { Frontend } from './frontend.js';
-import { DeviceTypeId, Endpoint as EndpointNode, Logger, LogLevel as MatterLogLevel, LogFormat as MatterLogFormat, VendorId, StorageService, Environment, ServerNode } from '@matter/main';
+import { DeviceTypeId, Endpoint as EndpointNode, Logger, LogLevel as MatterLogLevel, LogFormat as MatterLogFormat, VendorId, StorageService, Environment, ServerNode, UINT32_MAX, UINT16_MAX, } from '@matter/main';
 import { DeviceCommissioner, FabricAction, MdnsService, PaseClient } from '@matter/main/protocol';
 import { AggregatorEndpoint } from '@matter/main/endpoints';
 import { BasicInformationServer } from '@matter/main/behaviors/basic-information';
@@ -1406,10 +1406,10 @@ export class Matterbridge extends EventEmitter {
         await storageContext.set('productLabel', productName.slice(0, 32));
         await storageContext.set('serialNumber', await storageContext.get('serialNumber', serialNumber ? serialNumber.slice(0, 32) : 'SN' + random));
         await storageContext.set('uniqueId', await storageContext.get('uniqueId', 'UI' + random));
-        await storageContext.set('softwareVersion', parseVersionString(this.matterbridgeVersion) || 1);
-        await storageContext.set('softwareVersionString', isValidString(this.matterbridgeVersion, 5) ? this.matterbridgeVersion : '1.0.0');
-        await storageContext.set('hardwareVersion', parseVersionString(this.systemInformation.osRelease) || 1);
-        await storageContext.set('hardwareVersionString', isValidString(this.systemInformation.osRelease, 5) ? this.systemInformation.osRelease : '1.0.0');
+        await storageContext.set('softwareVersion', isValidNumber(parseVersionString(this.matterbridgeVersion), 0, UINT32_MAX) ? parseVersionString(this.matterbridgeVersion) : 1);
+        await storageContext.set('softwareVersionString', isValidString(this.matterbridgeVersion, 5, 64) ? this.matterbridgeVersion : '1.0.0');
+        await storageContext.set('hardwareVersion', isValidNumber(parseVersionString(this.systemInformation.osRelease), 0, UINT16_MAX) ? parseVersionString(this.systemInformation.osRelease) : 1);
+        await storageContext.set('hardwareVersionString', isValidString(this.systemInformation.osRelease, 5, 64) ? this.systemInformation.osRelease : '1.0.0');
         this.log.debug(`Created server node storage context "${pluginName}.persist" for ${pluginName}:`);
         this.log.debug(`- storeId: ${await storageContext.get('storeId')}`);
         this.log.debug(`- deviceName: ${await storageContext.get('deviceName')}`);

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "matterbridge",
-  "version": "3.0.1-dev-20250502-c002841",
+  "version": "3.0.1-dev-20250503-71b796a",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "matterbridge",
-      "version": "3.0.1-dev-20250502-c002841",
+      "version": "3.0.1-dev-20250503-71b796a",
       "license": "Apache-2.0",
       "dependencies": {
         "@matter/main": "0.13.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "matterbridge",
-  "version": "3.0.1-dev-20250502-c002841",
+  "version": "3.0.1-dev-20250503-71b796a",
   "description": "Matterbridge plugin manager for Matter",
   "author": "https://github.com/Luligu",
   "license": "Apache-2.0",