FitTrackee

v1.3.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 12d Productivity & Wikis

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

activity-tracker chartjs flask gpx gpxpy leaflet

+6 more

outdoor-activities python self-hosted vue3 workout-tracker workouts

ReleasePort's take

Moderate signal

editorial:auto 12d

The release fixes a security vulnerability by ensuring chart data is returned only according to map visibility level.

Why it matters: Addresses a high-severity (severity 90) security issue affecting the chart data endpoint; operators should apply the update promptly.

Summary

AI summary

Broad release touches Translations, German, Bugs Fixed, and Polish.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Fixes a security vulnerability by returning chart data according to map visibility level. Fixes a security vulnerability by returning chart data according to map visibility level. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Forwards cache headers for map tiles. Forwards cache headers for map tiles. Source: llm_adapter@2026-07-14 Confidence: high	—

Full changelog

This version contains fixes including a security fix (GHSA-ccv3-xq4j-5gw7).
Thanks to @pythonruban for the report.

Security

PR#1196 - Return chart data according to map visibility level

Bugs Fixed

PR#1195 - Forward cache headers for map tiles

Translations

PR#1175 - Translations update from Hosted Weblate (German)
PR#1179 - Translations update from Hosted Weblate (Chinese (Simplified Han script))
PR#1181 - Translations update from Hosted Weblate (German)
PR#1186 - Translations update from Hosted Weblate (Polish)
PR#1190 - Init Belarusian translations files
PR#1192 - Translations update from Hosted Weblate (Russian)

Translation status for languages available on the interface:

Basque: 97%
Bulgarian: 50%
Catalan: 58%
Chinese (Simplified): 100%
Croatian: 100%
Czech: 49%
Dutch: 100%
English: 100%
French: 100%
Galician: 100%
German: 100%
Italian: 97%
Kabyle: 5%
Norwegian Bokmål: 42%
Polish: 93%
Portuguese: 50%
Russian: 94%
Spanish: 67%
Turkish: 1%

Thanks to the contributors:

@PeterPwr
@poesty
@sikmir
Sylwester Wieczorek

Security Fixes

dep: GHSA-ccv3-xq4j-5gw7 — Return chart data according to map visibility level

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track FitTrackee

Get notified when new releases ship.

About FitTrackee

Self-hosted outdoor activity tracker :bicyclist

All releases →

Related context

Related tools

Earlier breaking changes

v1.3.0 Installation from source on production requires Node
v1.3.0 Python 3.10 no longer supported