Skip to content

Fredy

v22.10.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3d Automation & Workflows
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

appartment appartments crawler ebay-kleinanzeigen fredy immobilien
+13 more
immobilienscout24 immonet immoscout24 immowelt nodejs puppeteer real-estate real-estate-search self-hosted telegrambots web-scraping wg-gesucht wohnungssuche

Affected surfaces

rce_ssrf

Summary

AI summary

Fix prevents SQLite database path traversal and adds multi‑address distance calculation.

Full changelog

What's Changed

  • feat: add InBerlinWohnen provider by @madsbergstroem in https://github.com/orangecoding/fredy/pull/367
  • fix(sqlite adapter): prevent path traversal via user-controlled dbPath by @sebastiondev in https://github.com/orangecoding/fredy/pull/371
  • feat: Allow multiple addresses for distance calculation (#359) by @konlanx in https://github.com/orangecoding/fredy/pull/372

New Contributors

  • @madsbergstroem made their first contribution in https://github.com/orangecoding/fredy/pull/367
  • @sebastiondev made their first contribution in https://github.com/orangecoding/fredy/pull/371
  • @konlanx made their first contribution in https://github.com/orangecoding/fredy/pull/372

Full Changelog: https://github.com/orangecoding/fredy/compare/22.9.9...22.10.0

Security Fixes

  • fix(sqlite adapter): prevent path traversal via user‑controlled dbPath
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Fredy

Get notified when new releases ship.

Sign up free

About Fredy

Searches for new apartments, houses, and flats in Germany on platforms like ImmoScout24, Immowelt, and others, and instantly delivers the results to you via Slack, Telegram, and more.

All releases →

Related context

Earlier breaking changes

  • v22.0.4 Forbid backup and restore operations in demo mode.

Beta — feedback welcome: [email protected]