This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+4 more
ReleasePort's take
Light signalVersion 1.7.1 adds PWA branding fields in the Admin tab and preserves inline images when replying to messages.
Why it matters: Admins can now customize PWA appearance; email replies reliably retain embedded images, improving user experience.
Summary
AI summaryPreserve inline images when replying, resolve destination account IDs for cross‑account drops.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Admin exposes PWA branding fields in admin Branding tab Admin exposes PWA branding fields in admin Branding tab Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Feature | Medium |
Pro hides empty-state placeholder and collapses viewer pane in Pro mode Pro hides empty-state placeholder and collapses viewer pane in Pro mode Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Bugfix | Medium |
Mail preserves inline images when replying Mail preserves inline images when replying Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Bugfix | Medium |
Filters use canonical INBOX mailbox in Sieve filter paths Filters use canonical INBOX mailbox in Sieve filter paths Source: llm_adapter@2026-05-22 Confidence: high |
— |
| Bugfix | Medium |
Mail resolves destination account id to local namespace on cross-account mailbox drop Mail resolves destination account id to local namespace on cross-account mailbox drop Source: llm_adapter@2026-05-22 Confidence: high |
— |
Full changelog
1.7.1 (2026-05-22)
Features
- Admin: Expose PWA branding fields in the admin Branding tab
- Pro: Hide empty-state placeholder and collapse the viewer pane in Pro mode so the mail list fills the space
Fixes
- Mail: Preserve inline images when replying (#163)
- Filters: Use the canonical
INBOXmailbox in Sieve filter paths (#313) - Mail: Resolve destination account id to the local namespace on cross-account mailbox drop
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About webmail
Webmail built for the 21st Century. A modern, self-hosted email client for Stalwart Mail Server powered by the JMAP protocol. Email, calendar, contacts and files. Fast, private, and open source.
Related context
Earlier breaking changes
- v1.7.0 Server‑managed plugin bundles must be Ed25519‑signed and admin‑approved before loading.
- v1.7.0 Bundle hash is now full SHA-256; legacy hashes auto-migrated.
- v1.7.0 Server-managed bundles require Ed25519 signature verification.
- v1.7.0 Plugins run in sandboxed iframe with postMessage RPC bridge.
Beta — feedback welcome: [email protected]