v3.7.13 v1.5.6-stable
low risk
nari-labs/dia2Sep 4, 2026 → Sep 4, 20260 days between releases
What's New
Newer release fixes metadata security leak and share password bug.
Improvements
- CSP security hardening is enabled in this release.
Bug Fixes
- Fixed infinite loading spinner on root and login paths.
- Fixed issue where saving an existing share cleared its password.
- Fixed moderate security vulnerability in public metadata APIs.
Upgrade Notes
No specific configuration changes required. Note that CSP security hardening is enabled, which may affect resource loading on root and login paths.
The Two Releases
v3.7.13
v3.7.13
Sep 4, 2026· 2 months ago
A security and bug fix release addressing multiple CVEs and improving ACME, HTTP/3, and middleware behaviors.
Full release notesv1.5.6-stable
v1.5.6-stable
Sep 4, 2026· 2 months ago
A stable release addressing a critical security vulnerability affecting public metadata sharing and resolving specific bugs related to share creation and page loading.
Full release notes