Part-DB

v2.13.2 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 10d Relational Databases

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

database electronics inventory inventory-management inventory-management-system inventory-system

+6 more

mysql part-db php symfony symfony-application symfony5

Affected surfaces

deps

ReleasePort's take

Moderate signal

editorial:auto 10d

The release adds a critical security fix that prevents formula injection during Excel exports and addresses several bug fixes across file handling, asset delivery, and dependency updates.

Why it matters: A high‑severity (90) security issue blocks formula injection when exporting tables as Excel files; all deployments using this feature must update to v2.13.2 immediately.

Summary

AI summary

Updates Bug fixes, Other changes, and Part-DB 2.13.2 across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Prevent formula injection when exporting tables as Excel files Prevent formula injection when exporting tables as Excel files Source: llm_adapter@2026-07-17 Confidence: high	—
Dependency	Low	Updated dependencies to latest versions Updated dependencies to latest versions Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Respect attachment file limits on download and base64 upload via API Respect attachment file limits on download and base64 upload via API Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Fix JavaScript and CSS loading issues with Apache mod_php Fix JavaScript and CSS loading issues with Apache mod_php Source: llm_adapter@2026-07-17 Confidence: high	—

Full changelog

[!IMPORTANT]
If you are using Part-DB it would be helpful if you fill out this short survey on your usage of Part-DB (Google Forms): https://forms.gle/Q15twx3YYq3qCNfe8

Part-DB 2.13.2

Bug fixes

Respect the attachment file limits, when Part-DB downloads a file, or a file gets uploaded base64 encoded via API
Prevent formula injection when exporting tables as excel files
Fixed problem with javascript and CSS not loading when using apache with mod_php (#1423)

Other changes

Updated dependencies
Improved documentation (@Apfelwurm, #1438)
Improved translations

New Contributors

@Apfelwurm made their first contribution in https://github.com/Part-DB/Part-DB-server/pull/1438

Full Changelog: https://github.com/Part-DB/Part-DB-server/compare/v2.13.1...v2.13.2

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Part-DB

Get notified when new releases ship.

About Part-DB

Inventory management system for your electronic components.

All releases →