Oikos

v0.66.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 10d Productivity & Wikis

✓ No known CVEs patched

This release patches 1 known CVE

Topics

docker family family-planner home-automation planner-app privacy-first

+4 more

progressive-web-app pwa self-hosted selfhosted-apps

Affected surfaces

crypto_tls

Summary

AI summary

Avatar color selection now uses cryptographically secure random number generation.

Type	Severity	Summary	CVE
Security	High	Avatar color selection now uses crypto.randomInt instead of Math.random Avatar color selection now uses crypto.randomInt instead of Math.random Source: llm_adapter@2026-06-09 Confidence: low	—

Full changelog

Avatar color selection now uses crypto.randomInt instead of Math.random (CWE-338).

Avatar color selection now uses crypto.randomInt instead of Math.random (CWE-338).

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Oikos

Get notified when new releases ship.

About Oikos

Family planner for small households

v0.71.3 Changes WebDAV backup default path from "/oikos/backups/" to "/yuvomi/backups/".
v0.66.0 Repository URL changed to `https://github.com/ulsklyc/yuvomi`.
v0.66.0 Docker image moved to `ghcr.io/ulsklyc/yuvomi`.
v0.66.0 Project renamed from Oikos to Yuvomi.
v0.62.0 Changes event dialog to unified sync target picker across Google and CalDAV calendars.