This is a security release to 3.3.13 which fixes two critical vulnerabilities in PHP:
- CVEs (GHSA-w8hw-w9fx-j79w / CVE-2026-109618 and GHSA-6wmf-4rv5-p3rp / CVE-2026-109619)
- ca-certificates updated with the version from alpine:3.22 to fix eMudhra Intermediate CA Compromise
If you do not use the recommended Docker deployment, please ensure your PHP environment is updated accordingly.
Docker files with a rebuilt XMR service will follow shortly.