From 266246e242430d921c32badecdd447514107c568 Mon Sep 17 00:00:00 2001 From: Daniel Hiller Date: Mon, 10 Aug 2026 18:28:48 +0200 Subject: [PATCH] chore: Update version --- client/src/assets/docs/whats-new.md | 8 +++++++- client/src/version.js | 2 +- package.json | 2 +- server/version.js | 2 +- 4 files changed, 10 insertions(+), 4 deletions(-) diff --git a/client/src/assets/docs/whats-new.md b/client/src/assets/docs/whats-new.md index dd97b4c0..8dc41667 100644 --- a/client/src/assets/docs/whats-new.md +++ b/client/src/assets/docs/whats-new.md @@ -1,4 +1,10 @@ -# [2.2.0] - 2026-08-09 +# [2.2.1] - 2026-08-10 + +### Fixed + +* Fix path traversal in the static file routes that allowed authenticated users to read arbitrary files from the server + +## [2.2.0] - 2026-08-09 ### ⚠️ Breaking changes diff --git a/client/src/version.js b/client/src/version.js index d6aa1be8..cd473caa 100644 --- a/client/src/version.js +++ b/client/src/version.js @@ -1 +1 @@ -export default '2.2.0'; +export default '2.2.1'; diff --git a/package.json b/package.json index 487f0621..27ef467d 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "planka", - "version": "2.2.0", + "version": "2.2.1", "private": true, "scripts": { "client:build": "npm run build --prefix client", diff --git a/server/version.js b/server/version.js index 8c3c3948..d810b945 100644 --- a/server/version.js +++ b/server/version.js @@ -1 +1 @@ -module.exports = '2.2.0'; +module.exports = '2.2.1';