AliasVault

What’s Changed

[!IMPORTANT] 🔒 Browser extension passkey validation vulnerability (disclosed 2026-06-18): This version 0.29.4 includes a fix for a browser extension-specific passkey validation issue (CVE-2026-55587). Users of the AliasVault browser extension are recommended to update to version 0.29.4 or later. Self-hosted servers, the web app, and mobile apps were not affected. Fix commit: https://github.com/aliasvault/aliasvault/commit/a60d0966e66ecf4f6558dc40e3feb1313072ce2b

Bugfix release: fixes for potential Android app crashes, updated translations, improved browser extension passkey reliability, and performance enhancements in the web app.

🚀 New Features

• Improve email page performance in web app by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2126
• New Crowdin updates by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2115

🐞 Bug Fixes

• Make all username checks case insensitive in API by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2123
• Android app crashes when trying to render certain favicons by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2127

🧩 Dependencies Updates

• Bump the npm_and_yarn group across 3 directories with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2118
• Bump the npm_and_yarn group across 1 directory with 1 update by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2119
• Bump react-router from 7.12.0 to 7.16.0 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2130

Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.29.3…0.29.4