This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
Affected surfaces
ReleasePort's take
Moderate signalRelease v1.4.1 adds navigation bar insets to HomeScreen FABs and introduces tap‑to‑reveal for OTP codes, while fixing several UI bugs.
Why it matters: Security engineers should note the critical hardening that clears sensitive cryptographic data from memory (severity 90).
Summary
AI summaryUpdates New, Fix, and Hardening across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Critical |
Hardens by clearing sensitive cryptographic data from memory after use. Hardens by clearing sensitive cryptographic data from memory after use. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Low |
Adds navigation bar insets to HomeScreen FABs. Adds navigation bar insets to HomeScreen FABs. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Feature | Low |
Adds tap-to-reveal for OTP codes, enabled in Settings. Adds tap-to-reveal for OTP codes, enabled in Settings. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Fixes system navigation bar overlap with "Add account" floating button on home screen. Fixes system navigation bar overlap with "Add account" floating button on home screen. Source: llm_adapter@2026-05-27 Confidence: high |
— |
| Bugfix | Medium |
Fixes floating button padding on larger devices (tablets / foldables). Fixes floating button padding on larger devices (tablets / foldables). Source: llm_adapter@2026-05-27 Confidence: high |
— |
Full changelog
What's Changed
- New: Add navigation bar insets to HomeScreen FABs by @fthomys in https://github.com/fthomys/tokn/pull/23 to fix a issue
- New: tap-to-reveal for OTP codes. Codes stay masked until you tap them (enable in Settings).
- Fix: the system navigation bar no longer overlaps the "Add account" floating button on the home screen.
- Fix: floating button padding on larger devices (tablets / foldables).
- Hardening: sensitive cryptographic data is now cleared from memory after use.
Full Changelog: https://github.com/fthomys/tokn/compare/v1.4.0...v1.4.1
Security Fixes
- Sensitive cryptographic data is cleared from memory after use
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About fthomys/Tokn
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]