This release includes 1 security fix for security teams reviewing exposed deployments.
Published 19d
AI Agents & Assistants
✓ No known CVEs patched
This release patches 1 known CVE
Topics
accounting
ai-analysis
currency-exchange
expenses
gemini
invoices
+6 more
llm
ocr-recognition
ollama
openai
self-hosted
taxes
Affected surfaces
rce_ssrf
Summary
AI summaryUpdates deps, feat, and fix across a mixed release.
Full changelog
What's Changed
- feat: new sidebar by @vas3k
- fix: transaction filters by @vas3k
- chore(deps): bump LangChain to v1 by @TriplEight in https://github.com/vas3k/TaxHacker/pull/125
- docs: add “internet-exposed self-hosted” hack (yes, it’s cursed) by @H1D in https://github.com/vas3k/TaxHacker/pull/46
- fix(security): prevent path traversal in deleteFile (#75) by @Vitalcheffe in https://github.com/vas3k/TaxHacker/pull/85
- chore(deps): batch minor/patch version bumps by @TriplEight in https://github.com/vas3k/TaxHacker/pull/126
- ci: make branch-image publish manual instead of automatic on every PR by @TriplEight in https://github.com/vas3k/TaxHacker/pull/146
Full Changelog: https://github.com/vas3k/TaxHacker/compare/v0.8.0...v0.8.2
Security Fixes
- Fix(security): prevent path traversal in deleteFile (#75)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About TaxHacker
Self-hosted AI accounting app. LLM analyzer for receipts, invoices, transactions with custom prompts and categories
Related context
Related tools
Beta — feedback welcome: [email protected]