v0.97.1 1.23.2
zumerlab/snapdomSep 29, 2026 → Sep 29, 20260 days between releases
What's New
Major version bump introduces significant security hardening including stricter file permissions and SSRF protection.
Breaking Changes
- Users must rotate `SECRET_KEY` if other users could read the old file.
- Image exports will no longer include media from private networks.
- Image exports require `LABEL_STUDIO_HOST` to include uploaded files from external storage.
New Features
- SSRF protection for image exports.
- Sandboxed content (CSP) for uploaded HTML/SVG/XML.
- S3 storage endpoints re-checked for private addresses.
Upgrade Notes
Users must rotate the `SECRET_KEY` file if it was previously readable by other local users. Image exports may omit media from private networks; configure `USER_ADDITIONAL_BANNED_SUBNETS` or `SSRF_PROTECTION_ENABLED` if internal media hosting is required. Ensure `LABEL_STUDIO_HOST` is set to allow downloading uploaded files from external storage.
The Two Releases
v0.97.1
Sep 29, 2026· 23 days ago
A minor patch release that removes a specific glyph from the Git branch display to ensure compatibility with terminals lacking nerd fonts.
Full release notes1.23.2
Sep 29, 2026· 23 days ago
This release focuses on security hardening, specifically tightening file permissions for the SECRET_KEY and adding SSRF protection for image exports.
Full release notes