v0.4.6 - Security: Vite Dev Server Patch

[PaulAtkins88]

🔒 Security Update

Patches three path traversal vulnerabilities in the Vite dev server.

Security

• 🛡️ Bumped vite from 7.3.0 to 7.3.2 — addresses three server.fs path traversal issues (#22159, #22160, #22161) reported in the Vite dev server

Note: These vulnerabilities only affect pnpm dev (the Vite development server). Production builds are compiled to static files and are not affected. If you only run the built app (e.g. Docker / self-hosted), you are not at risk from this specific issue — but upgrading is still recommended.

Upgrade Notes

• No database migration required
• Drop-in upgrade from v0.4.5

See CHANGELOG.md for full technical details.

---

This discussion was created from the release v0.4.6 - Security: Vite Dev Server Patch.