Wallos - Package Updates

[Package Updates]

[1.19.1]

• Update Wallos to 4.6.1
• Full Changelog
• vulnerabily on add subscription endpoint (#​991) (76a53df)

[Package Updates]

[1.20.1]

• Update Wallos to 4.7.2
• Full Changelog
• password reset tokens now expire after 60 minutes (90bb618)
• vulnerability would allow to bypass 2fa (#​1021) (90bb618)

[Package Updates]

[1.20.2]

• Update Wallos to 4.7.3
• Full Changelog
• image search failing to save (4fd87c3)
• session expiration on pwa on android (#​1023) (4fd87c3)

[Package Updates]

[1.21.0]

• Update Wallos to 4.8.0
• Full Changelog
• add openai compatible host for ai recommendations (99c30e7)
• enable ai recommendations at a schedule (99c30e7)
• move update banner to the dashboard (99c30e7)
• handle some ai responses that come in a different format (99c30e7)

[Package Updates]

[1.21.1]

• Update Wallos to 4.8.2
• Full Changelog
• logo cut on registration page (#1040) (a95aaad)
• dns rebinding vulnerability (e79f28b)
• only allow to use internal urls csrf validation bypass by admin user (e79f28b)
• ssrf vultenaribility on add subscription (#1038) (e79f28b)

[Package Updates]

[1.21.2]

• Update Wallos to 4.8.3
• Full Changelog
• cases on private endpoints where self-xss was possible (#1045) (d4725f3)

[Package Updates]

[1.21.3]

• Update Wallos to 4.8.4
• Full Changelog
• improve date formatting with IntlDateFormatter fallback (b2c565f) (#1048) (8d43623)
• missing year for subscription next payment display (ca5823d) (8d43623)

[Package Updates]

[1.22.0]

• Update Wallos to 4.9.0
• Full Changelog
• allow multiple filters on the settings page (0fef959)
• filter by notification status (0fef959)
• lifetime subscriptions (0fef959)
• rework icons (0fef959)
• sort graphs on the statistics page by usage (0fef959)
• don't use mbstring (0fef959)
• migrations using double quotes (0fef959)
• ntfy notifications with strange chars (0fef959)
• null array on empty subscription list (0fef959)
• open 3 dot menu abone for the subscriptions at the bottom (0fef959)

[Package Updates]

[1.22.1]

• Update Wallos to 4.9.3
• Full Changelog
• bump version (#1069) (fb96250)
• build (#1067) (ee62138)
• cross-user data isolation issues (e276147)
• ensure a user always has an api key generated (e276147)
• null pointer on subscription with price 0 (e276147)

[Package Updates]

[1.22.2]

• Update Wallos to 4.9.5
• Full Changelog
• container startup (#1077) (b33d2cb)
• restrict migrate.php to CLI and admin session (85bba48)
• secure unauthenticated db restore endpoint with a setup token (85bba48)
• validate oidc state parameter to prevent csrf login attack (85bba48)

[Package Updates]

[1.22.3]

• Update Wallos to 4.9.6
• Full Changelog
• account takeover via email-based account linking (b75f13d)
• harden oidc state validation and session rotation (#1071) (b75f13d)
• missing fields when cloning a subscription (b75f13d)
• ssrf via oidc token/userInfo url configuration (b75f13d)
• ssrf via test email notification (b75f13d)
• zip slip path traversal in database restore writes files to webroot (b75f13d)

[Package Updates]

[1.23.0]

• Update Wallos to 5.0.0
• Full Changelog
• complete ui overhaul (#1108)
• Allow setting beginning of week as Sunday in calendar (#1010)
• dashboard icons image search
• declarative oidc settings
• google image search with serpapi
• grid view for subscriptions
• more statistics
• selfh.st image search
• subscription details popup
• v2.0 api - write endpoints

[Package Updates]

[1.24.0]

• Update Wallos to 5.1.1
• Full Changelog
• bump version (#1113) (d3b72d3)
• create dark and light theme versions of the logos when removing background (8d22f04)
• ajax calls after session expired (8d22f04)

[Package Updates]

[1.25.0]

• Update Wallos to 5.2.0
• Full Changelog
• add new logo themed versions generation to add subscription api endpoint (921fcfd)
• better navigation inside logo search (921fcfd)
• bottom sheet slide up animation (921fcfd)
• improve menu navigation on grid mode (921fcfd)
• syntax error on nl.js translation file (921fcfd)

[Package Updates]

[1.26.0]

• Update Wallos to 5.4.1
• Full Changelog
• bump version (#1131) (18dd08b)
• add Arabic localization (aff3ed0)
• add manual logo search box and png prioritization (aff3ed0)
• add OIDC_REQUIRE_EMAIL_VERIFIED environment variable and SSRF_ALLOWLIST environment variable (aff3ed0)
• ai recommendations not handling varied provider responses (aff3ed0)
• deleting orphaned logos not taking into account themed variants (aff3ed0)
• email notification test rejecting non-admin users (aff3ed0)
• notification test/send requests hanging on unreachable hosts (aff3ed0)
• progress bar showing 100% when next payment is more than one cycle away (aff3ed0)
• service worker caching stale logo search results and broken images as logos (aff3ed0)

[Package Updates]

[1.26.1]

• Update Wallos to 5.4.2
• Full Changelog
• use themed version of the logo on edit subscription page (#1133) (e913511)