This release focuses on security hardening and reducing unnecessary exposure in the frontend editor stack. Updates were made to address reported vulnerabilities and keep your application safer by default.
Security updates
We applied dependency security fixes that address several known vulnerability classes, including directory traversal, stored XSS, and SSRF. These updates help reduce risk without changing how you use the product day to day.
Notable security items addressed include:
- Directory traversal protection
- Stored XSS mitigation
- SSRF risk reduction related to protocol-relative URLs
- ReDoS-related fixes in parsing and matching dependencies
Frontend dependency cleanup
An unused Quill package was removed. This reduces your exposure to a low-severity XSS risk tied to that dependency and keeps the editor dependency set more focused.