jmap-webmail

mirror of https://github.com/root-fr/jmap-webmail.git synced 2026-09-22 16:01:12 +00:00

Files

T

Matthieu MALVACHE 3ea7441f93 fix: v1.5.2 - patch Next.js WebSocket SSRF (CVE-2026-44578)

Security: upgrade Next.js 16.2.4 -> 16.2.6 to patch CVE-2026-44578
(GHSA-c4j6-fc7j-m34r, CVSS 8.6, unauthenticated WebSocket-upgrade
SSRF on the built-in Node server) and eleven other May 2026
advisories bundled in the same release. next-intl patched for
GHSA-4c35-wcg5-mm9h prototype pollution in the experimental
precompile path. React/react-dom rolled forward to 19.2.6.

Fixes:
- bulk delete now honours the "delete to trash" setting instead of
  always hard-deleting
- favicon repaints the base icon on zero unread so the badge clears

2026-05-14 22:32:20 +02:00

__tests__

feat(calendar): add event notifications with alert evaluation

2026-02-16 23:49:35 +01:00

auth-store.ts

feat: add "Remember me" session persistence and simplify 2FA UX

2026-02-26 00:47:53 +01:00

calendar-notification-store.ts

feat(calendar): add event notifications with alert evaluation

2026-02-16 23:49:35 +01:00

calendar-store.ts

feat: add participant scheduling with iTIP invitations and inline calendar invitation banner