Posts tagged infrastructure on Freedom.Tech.
Broad hardening pass on API permissions, untrusted input handling, and browser-action links; Recommended upgrade for self-hosted instances
Upgraded Node.js to v26.12.1 for security and performance improvements
Maintenance release in the 2.x series; Routine upgrade for Electrum server operators
Default behavior now blocks outbound requests to private-network destinations for Lightning, LNURL, webhooks, and invoice notification URLs, closing an SSRF vector. Self-hosted instances should review any internal-network integrations that relied on the old default
Requires Bitcoin Core 31 and full reindex for new bindex format
NFC payments now disabled at checkout
Security release; Recommended for multi-user server deployments
Fulcrum 2.1.2 upgrades internal hash map library to ankerl, improves ARM64 Docker builds, and fixes various code nits
Critical vulnerability actively exploited; Immediate upgrade recommended
Adds BIP-329 label import, editable invoice comments, plugin directory improvements
Mempool 3.3.1 shipped with potential breaking changes to rendering pipeline, blocks API, and address data requiring staging verification before production deployment
