Skip to content

TaxHacker

v0.8.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

accounting ai-analysis currency-exchange expenses gemini invoices
+6 more
llm ocr-recognition ollama openai self-hosted taxes

Affected surfaces

rce_ssrf

Summary

AI summary

Updates deps, feat, and fix across a mixed release.

Full changelog

What's Changed

  • feat: new sidebar by @vas3k
  • fix: transaction filters by @vas3k
  • chore(deps): bump LangChain to v1 by @TriplEight in https://github.com/vas3k/TaxHacker/pull/125
  • docs: add “internet-exposed self-hosted” hack (yes, it’s cursed) by @H1D in https://github.com/vas3k/TaxHacker/pull/46
  • fix(security): prevent path traversal in deleteFile (#75) by @Vitalcheffe in https://github.com/vas3k/TaxHacker/pull/85
  • chore(deps): batch minor/patch version bumps by @TriplEight in https://github.com/vas3k/TaxHacker/pull/126
  • ci: make branch-image publish manual instead of automatic on every PR by @TriplEight in https://github.com/vas3k/TaxHacker/pull/146

Full Changelog: https://github.com/vas3k/TaxHacker/compare/v0.8.0...v0.8.2

Security Fixes

  • Fix(security): prevent path traversal in deleteFile (#75)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track TaxHacker

Get notified when new releases ship.

Sign up free

About TaxHacker

Self-hosted AI accounting app. LLM analyzer for receipts, invoices, transactions with custom prompts and categories

All releases →

Related context

Beta — feedback welcome: [email protected]