beaverhabits

v0.9.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 14d Productivity & Wikis

✓ No known CVEs patched

This release patches 1 known CVE

Topics

habit-tracker habit-tracking habits python self-hosted streaks

Affected surfaces

auth

Summary

AI summary

Updates feat, Chores / Docs, and index across a mixed release.

Type	Severity	Summary	CVE
Security	Medium	strip HTML tags from custom CSS to prevent stored XSS strip HTML tags from custom CSS to prevent stored XSS Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low	—
Feature	Medium	add completion status page for default/custom status configuration add completion status page for default/custom status configuration Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low	—
Feature	Medium	add TIME_ZONE env var to override browser-detected timezone add TIME_ZONE env var to override browser-detected timezone Source: granite4.1:8b-q6_K@2026-05-20 Confidence: low	—
Bugfix	Medium	auto-refresh habit list when local date rolls over auto-refresh habit list when local date rolls over Source: granite4.1:8b-q6_K@2026-05-20 Confidence: high	—

Full changelog

Full Changelog: https://github.com/daya0576/beaverhabits/compare/v0.9.0...v0.9.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track beaverhabits

Get notified when new releases ship.

About beaverhabits

A self-hosted habit tracking app without "Goals"