AliasVault

What’s Changed

[!IMPORTANT] 🔒 Android app security update (disclosed 2026-01-14): This version 0.25.3 includes a fix for an Android-specific passkey validation issue (CVE-2026-22694). Android users are recommended to update to 0.25.3 or later. iOS, browser extensions, and server components are not affected.

[!TIP]
Sneak peek: A lot of work is going into the upcoming 0.26.0 feature release, which will include major data model updates such as full offline mode, new credential types, support for multiple credential URLs, field history, custom fields, and more. For a sneak preview of what this release will bring, read our latest blog update: https://www.aliasvault.net/blog/upcoming-major-update

Bugfix release: improved Android passkey handling for better compatibility, new French and Spanish language support across all apps, minor admin statistics tweaks and dependency updates.

🚀 New Features

• Show more recent usage statistics in admin by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1421
• New Crowdin updates by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1422
• Add French and Spanish languages to all apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1437

🐞 Bug Fixes

• Improve android passkey provider origin handling by @lanedirt in https://github.com/aliasvault/aliasvault/pull/1441

🧩 Dependencies Updates

• Bump react-server-dom-webpack from 19.0.0 to 19.0.3 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1431
• Bump uri from 1.0.3 to 1.0.4 in /docs in the bundler group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1444
• Bump qs from 6.13.0 to 6.14.1 in /apps/mobile-app in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/1445

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.25.2…0.25.3