github rawnaldclark/Stash v0.9.22
Stash v0.9.22

latest releases: v0.9.99, v0.9.98, v0.9.97...
3 months ago

chore: bump versionCode 58->59, versionName 0.9.21->0.9.22

Stash 0.9.22 — Security patches.

Resolves three Dependabot alerts in the puppeteer dev-tooling chain
(transitive deps; not present in the shipped APK runtime):

  • basic-ftp 5.2.2 -> 5.3.1: DoS via unbounded memory in Client.list() (HIGH)
  • basic-ftp 5.2.2 -> 5.3.1: DoS via multiline control buffering (HIGH)
  • ip-address 10.1.0 -> 10.2.0: XSS in Address6 HTML-emitting methods (MEDIUM)

Co-Authored-By: Claude Opus 4.7 (1M context) noreply@anthropic.com


Install

Download the .apk below and open it on your Android device. If you've got a previous Stash release installed, this upgrades in place — your library, sync history, and settings are preserved.

Requires: Android 8.0 (API 26) or newer.

See the README for first-time setup.

What's Changed

  • chore(security): bump basic-ftp + ip-address to patched versions by @rawnaldclark in #47

Full Changelog: v0.9.21...v0.9.22

Don't miss a new Stash release

NewReleases is sending notifications on new releases.