Skip to content

1.3.1

Choose a tag to compare

View all tags
@SandObserver SandObserver released this 09 Aug 18:49
· 1098 commits to main since this release
v1.3.1
f84c0cc

1.3.1 - 2026-07-20

Security and reliability fixes since 1.3.0. No breaking changes.

Security

  • Backup job and source discovery now routes the entered URL through the SSRF guard. If your backup server is on a private IP, set ALLOW_PRIVATE_IPS=true.
  • Widget config preview now routes the entered URL through the SSRF guard.
  • SSRF guard now blocks http://localhost by name.
  • Parallel login attempts are now rate-limited correctly.

Fixed

  • A config file that parses but has the wrong shape no longer crashes the server.
  • An error in a request handler now returns a 500 instead of stopping the server.
  • Speed test view now works with a MySpeed or Speedtest Tracker server on a private IP.
  • Corrected the Docker socket hint to point to a socket proxy URL.

Full changelog: v1.3.0...v1.3.1

Assets 2
Loading