AliasVault
Privacy-first password manager with a built-in email alias generator
Alternative to: 1password, bitwarden, simplelogin, firefox relay
0.23.1
2025-09-16What’s Changed
[!CAUTION]
🔒 Security Fix (disclosed 2025-09-19): This release (0.23.1) includes a security patch for vulnerability CVE-2025-59344. All users are strongly advised to upgrade to v0.23.1 or later as soon as possible.
Bugfix release with improvements for self-hosted installations using self-signed certificates, as well as general stability enhancements in favicon extraction. We recommend updating to this version for improved reliability.
Note: This update only affects the server. No changes to the client apps.
🐞 Bug Fixes
- Update self-signed SSL cert generation logic to use correct IP vs DNS labels by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1224
- [CVE-2025-59344] Improve favicon icon extraction to make request handling more robust and stable by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1226
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.23.0…0.23.1