This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+1 more
Summary
AI summaryAdded clipboard image paste support and hardened Docker Compose persistence paths.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Hardens persistence paths for uploads, SQLite data, models, and generator storage Hardens persistence paths for uploads, SQLite data, models, and generator storage Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Feature | Medium |
Adds clipboard image paste support on upload screen Adds clipboard image paste support on upload screen Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Feature | Low |
Normalizes image inputs before captioning for consistent model processing Normalizes image inputs before captioning for consistent model processing Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Dependency | Low |
Refreshes multi-arch Docker images for AMD64 and ARM64 with latest tags Refreshes multi-arch Docker images for AMD64 and ARM64 with latest tags Source: llm_adapter@2026-06-01 Confidence: high |
— |
| Bugfix | Medium |
Fixes Docker Compose database URL when custom DB_PORT is set Fixes Docker Compose database URL when custom DB_PORT is set Source: llm_adapter@2026-06-01 Confidence: high |
— |
Full changelog
Highlights
- Added clipboard image paste support on the upload screen, including validation, generated filenames, and end-to-end coverage.
- Normalized image inputs before captioning so transparent, palette, and grayscale images are converted consistently for the vision model.
- Fixed Docker Compose database URLs when a custom host
DB_PORTis set. - Hardened Compose persistence paths for uploads, SQLite data, models, and generator-side storage.
- Refreshed the multi-arch Docker images for AMD64 and ARM64.
Contributor Thanks
Thanks to the issue reporters and reviewers who helped pin down the upload, captioning, and Docker Compose edge cases covered by this release.
Docker Images
Multi-arch images are available for Linux AMD64 and ARM64:
ghcr.io/neonwatty/meme_search:v2.2.0ghcr.io/neonwatty/image_to_text_generator:v2.2.0
The latest tags have also been refreshed.
What's Changed
- chore: run GitHub Actions on Node 24 by @neonwatty in https://github.com/neonwatty/meme-search/pull/160
- Normalize image inputs before captioning by @neonwatty in https://github.com/neonwatty/meme-search/pull/161
- Fix Compose internal database URL by @neonwatty in https://github.com/neonwatty/meme-search/pull/162
- Harden Compose persistence paths by @neonwatty in https://github.com/neonwatty/meme-search/pull/164
- Add clipboard image upload support by @neonwatty in https://github.com/neonwatty/meme-search/pull/163
- Prepare v2.2.0 release by @neonwatty in https://github.com/neonwatty/meme-search/pull/165
Full Changelog: https://github.com/neonwatty/meme-search/compare/v2.1.0...v2.2.0
Security Fixes
- Hardened Docker Compose persistence paths for uploads, SQLite data, models, and generator-side storage
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About meme-search
The open source Meme Search Engine and Finder. Free and built to self-host locally with Python, Ruby, and Docker.
Beta — feedback welcome: [email protected]