Skip to content

v1.3.2

Choose a tag to compare

@dree007 dree007 released this 23 Oct 09:16
· 3 commits to main since this release

Security

  • The image runs on Node.js 24.22.1, fixing an out-of-bounds write in the
    Brotli decoder (remote code execution), TLS hostname verification bypasses
    and a dns.resolve name truncation, among others.
  • Next.js 16.4.2, fixing two critical remote code execution vulnerabilities
    (image optimization API with SVG files, use cache) and a denial of service
    through Server Actions.

Changes

  • Metrics show the change against the previous period of the same length, up
    to the same time (e.g. the previous 24 hours): requests, traffic, server
    error rate and average response time, the status classes and, per host,
    requests and server errors. A rise in errors or response time is red, a fall
    green; requests and traffic stay neutral. Also on the dashboard.
  • A managed directory that is missing or not writable for UID 1000 is no longer
    reported as "Another instance is reading" / "Another instance is active". The
    access log card and Caddy Config now say "Managed directory not writable",
    the access log card shows the command to fix it, and the container log
    states the cause.