v2.2.1 v0.25.2

low risk

dream-num/univerSep 2, 2026 → Sep 17, 202614 days between releases

What's New

Newer release v0.25.2 fixes prototype pollution, while older release v2.2.1 focused on data acceleration.

Bug Fixes

  • Fixes prototype pollution vulnerability in drawing and formula maps

Upgrade Notes

These releases appear to belong to different components (Spice vs Univer) or version branches; v0.25.2 requires no configuration changes as it is a security patch.

The Two Releases

v2.2.1

Spice v2.2.1 (September 1, 2026)

Sep 2, 2026· 2 months ago

This patch release enhances data acceleration with automatic storage reclamation by Cayenne, expands retention policy support to more dataset types, and improves query federation capabilities with BigQuery and DuckDB.

Full release notes
v0.25.2

🐢 Release v0.25.2

Sep 17, 2026· 1 month ago

This is a maintenance release that addresses a security vulnerability by preventing prototype pollution in drawing and formula maps.

Full release notes