Skip to content

v0.16.4

Choose a tag to compare

View all tags
@nodiscc nodiscc released this 31 Jul 09:47
v0.16.4
This tag was signed with the committer’s verified signature.
nodiscc nodiscc
GPG key ID: 2811B9A88CFE7F24
Verified
Learn about vigilant mode.
5ce1d41
This commit was signed with the committer’s verified signature.
nodiscc nodiscc
GPG key ID: 2811B9A88CFE7F24
Verified
Learn about vigilant mode.

v0.16.4 - 2026-07-31

Security

  • prevent /admin/metadata endpoint from fetching metadata from private/reserved IPs (SSRF), including through redirects or DNS rebinding, require CSRF token
  • fix stored XSS via general.header_link configuration value, sanitize against javascript: URIs
  • update npm dependencies

Fixed

  • fix nullable type deprecation warnings from PHP 8.4

Changed

  • refactor Docker documentation

Full Changelog: v0.16.3...v0.16.4

Assets 3
Loading