← Back to all sparks
A

Activepieces

MKT AUTO
Velocity5.0

Open-source no-code automation tool for connecting apps and building AI-powered workflows.

Activepieces patches an unauthenticated webhook crash of its API on the 0.92 line.

workflow automationself-hostedsecurityrelease maintenance
◆Current state
Activepieces' public release feed is dominated by hotfixes across many version lines. On Oct 28, 0.92.3-hotfix.2 fixed a crash of the whole API process that an unauthenticated webhook could trigger through an illegal Return Response header name. On Oct 29 the Node.js 24.22.1 security upgrade reached 0.87.3, 0.86.3 and 0.82.0, so eight lines now carry it.
◆Where it's heading
The project keeps a long tail of minor lines alive for self-hosted users, now patching back as far as 0.82. Feature work shows up mainly in unstable releases, which have not appeared in this feed since 0.90.4.
◆Prediction
The crash fix is listed only on 0.92.3, so backports to older lines are the likely next hotfixes. The feed gives no signal on the next feature release.

◆Recent moves

  1. 16d ago

    0.82.0 hotfix: Node.js 24.22.1 security update

    The Node.js 24.22.1 upgrade reaches back to the 0.82.0 line, the oldest yet in this round.

    View source ↗
  2. 16d ago

    0.87.3 hotfix: Node.js 24.22.1 security update

    The 0.87.3 line gets the same Node.js security upgrade.

    View source ↗
  3. 16d ago

    0.86.3 hotfix: Node.js 24.22.1 security update

    The 0.86.3 line gets the same Node.js security upgrade.

    View source ↗
  4. 16d ago

    0.92.3 hotfix: unauthenticated webhook API crash fixed

    An illegal header name in a Return Response step could crash the whole API process from an unauthenticated webhook; it is now fixed. Unlike the surrounding runtime patches, this is a product-level availability fix that self-hosters should take.

    View source ↗
  5. 17d ago

    0.90.4 hotfix: Node.js 24.22.1 security update

    The 0.90.4 line also gets the Node.js 24.22.1 Docker upgrade for October's Node security fixes. Runtime patching with no product change.

    View source ↗
  6. 17d ago

    0.89.0 hotfix: Node.js 24.22.1 security update

    The 0.89.0 line gets the same Node.js 24.22.1 update, bringing the backport to five release lines.

    View source ↗