Download Latest Version
0.30.4 source code.zip (17.2 MB)
Get an email when there's a new version of AliasVault
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| install.sh | 2026-08-02 | 137.5 kB | |
| aliasvault-0.30.3-android.apk | 2026-08-02 | 173.6 MB | |
| aliasvault-0.30.3-browser-extension-sources.zip | 2026-08-02 | 1.5 MB | |
| aliasvault-0.30.3-firefox.zip | 2026-08-02 | 3.3 MB | |
| aliasvault-0.30.3-chrome.zip | 2026-08-02 | 3.3 MB | |
| aliasvault-0.30.3-edge.zip | 2026-08-02 | 3.3 MB | |
| 0.30.3 source code.tar.gz | 2026-08-02 | 13.2 MB | |
| 0.30.3 source code.zip | 2026-08-02 | 17.1 MB | |
| README.md | 2026-08-02 | 2.5 kB | |
| Totals: 9 Items | 215.4 MB | 0 | |
What's Changed
[!IMPORTANT] 🔒 Server-Side Request Forgery via DNS rebinding in Favicon Extraction (disclosed 2026-08-16): This version 0.30.3 includes a fix for a server-side request forgery vulnerability in the favicon extraction component: (GHSA-7hm6-fj4m-pf6f). Self-hosted users of AliasVault are recommended to update to 0.30.3 or later. AliasVault cloud users are not affected.
This release fixes multiple reported bugs, updates translations, and improves the browser extension autofill accuracy so it works on more websites.
A big thank you to our community for reporting issues and suggesting improvements on GitHub. Your feedback helps make AliasVault better for everyone!
🚀 New Features
- Update URL sanitization for mobile app credential create flow by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2301
- Add support for exporting/importing multiple URLs with CSV export format by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2318
- Improve browser extension autofill form detection for login pages using shadow root by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2320
- New Crowdin updates by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2317
🐞 Bug Fixes
- Resolve favicon extraction target DNS host only once per connection by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2311
- Copy TOTP to clipboard when authenticating with passkey too in all apps by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2316
- Fix issue in browser extension which sometimes opened a recently created credential while it shouldn't by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2313
- Do not truncate revealed password, instead allow to span to multiple lines by @lanedirt in https://github.com/aliasvault/aliasvault/pull/2322
🧩 Dependencies Updates
- Bump the npm_and_yarn group across 6 directories with 2 updates by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2302
- Bump sanitize-html from 2.17.4 to 2.17.5 in /apps/browser-extension in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/aliasvault/aliasvault/pull/2314
Full Changelog: https://github.com/aliasvault/aliasvault/compare/0.30.2...0.30.3
