Skip to content

TradeTally

v2.0.3 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 10mo Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

api journal stocks trading

Affected surfaces

auth deps

Summary

AI summary

Updates Vue, OpenAI, and Axios across a mixed release.

Full changelog

New Features

Core Trading Features

  • Image Upload for Trades - Upload and attach images/screenshots to trade records
  • Stock Split Tracking - Automatic tracking and adjustment for stock splits on open positions
  • Gamification System
    • Achievement system with animations
    • Leaderboards for competitive tracking
    • Points and badges for trading milestones
  • Public Trades - Share and view public trades in the menu bar
  • PostHog Analytics Integration - Enhanced analytics tracking for user behavior

Admin & User Management

  • Enhanced Admin Panel
    • Pagination for user management
    • User search functionality
    • Improved user total counts display
  • Two-Factor Authentication - Can now enable/disable MFA/2FA

UI/UX Improvements

  • Auto-refresh for Open Positions - Dashboard automatically updates position data
  • MDI Icon Package - Added Material Design Icons for better UI
  • Improved Trade Visualization - Enhanced chart with precise arrows using Finnhub API

Bug Fixes & Improvements

Critical Fixes

  • SAAS Branch Merge - Complete integration of SAAS features into main branch
  • Migration Fixes - Fixed multiple migration errors (057, strategy classification)
  • Import Logic - Fixed execution query errors and duplicate trade handling
  • User Profile - Fixed email update functionality
  • Date Handling - Fixed date inconsistencies across the application
  • User Deletion - Properly handle foreign key constraints and inactive users

Security & Performance

  • OWASP Security Standards - Implemented security updates following OWASP guidelines
  • Vulnerability Patches - Fixed multiple vulnerable packages
  • Performance - Price updates now only occur during market hours
  • Enhanced Logging - Added detailed logging with filtering and search capabilities

Documentation

  • Deployment Guide - Updated deployment documentation with fixes

Technical Updates

Dependency Updates

  • Vue: 3.5.17 → 3.5.18
  • OpenAI: 5.10.0 → 5.11.0
  • Axios: 1.10.0 → 1.11.0
  • Cheerio: 1.1.0 → 1.1.2
  • Marked: 16.0.0 → 16.1.2
  • @anthropic-ai/sdk: 0.56.0 → 0.57.0

Infrastructure

  • Docker Compose - Added development-specific docker-compose.dev.yaml
  • Database Migrations - Added 5+ new migration files for features and fixes

Notable Improvements

  • Better handling of trade executions display
  • Improved duplicate trade detection for open positions
  • Enhanced permissions for fetching trade images
  • Fixed achievement animations and auto-loading
  • Added support for log searching and filtering

Security Fixes

  • Implemented OWASP security standards
  • Patched multiple vulnerable packages (no specific CVEs listed)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track TradeTally

Get notified when new releases ship.

Sign up free

About TradeTally

Advanced financial trade tracking and analytics

All releases →

Related context

Beta — feedback welcome: [email protected]