This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 2mo
Productivity & Wikis
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
gamification
habit-tracking
habits
nextjs
rewards
self-hosted
Summary
AI summaryCritical security patches including Next.js update, path traversal hardening in avatar handling, and user data sanitization.
Security Fixes
- Path traversal attack prevention in avatar route
- User data sanitization in client payloads
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]