Oikos

v1.27.18 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 8d Productivity & Wikis

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

docker family family-planner home-automation planner-app privacy-first

+4 more

progressive-web-app pwa self-hosted selfhosted-apps

Affected surfaces

rce_ssrf

Summary

AI summary

Documentation added for two SSRF opt‑in environment variables.

Full changelog

Documented the two existing SSRF opt-in environment variables that let internally-resolving (LAN / private IP / internal-DNS) URLs be used, which were previously only mentioned in .env.example and the Unraid template (#520). ICS_SUBSCRIPTION_ALLOW_PRIVATE_NETWORK (for ICS calendar subscriptions) and DOCUMENT_STORAGE_WEBDAV_ALLOW_PRIVATE_NETWORK (for WebDAV document storage) are now covered in the README (EN and DE) and the installation guide's environment-variable tables, including why the check exists and why it stays an environment-level rather than a web-UI setting. Documentation only; no behaviour, data model or configuration changes.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Oikos

Get notified when new releases ship.

About Oikos

Family planner for small households

v0.71.3 Changes WebDAV backup default path from "/oikos/backups/" to "/yuvomi/backups/".
v0.66.0 Repository URL changed to `https://github.com/ulsklyc/yuvomi`.
v0.66.0 Docker image moved to `ghcr.io/ulsklyc/yuvomi`.
v0.66.0 Project renamed from Oikos to Yuvomi.
v0.62.0 Changes event dialog to unified sync target picker across Google and CalDAV calendars.