@unitybase/adminui-vue #

Added #

7.0.61 2026-07-01 #
  • webDav.getURISync method to synchronously build a WebDAV URI for a document using the current session token when needed
  • UFile: new renderer and input slots to allow customizing view and loading states
  • UFileMultiple: new renderer slot to allow customizing the default file renderer for each file in the list for carousel and carouselWithPreview viewMode

Fixed #

7.0.61 2026-07-01 #
  • SECURITY extended PDF viewer: use origin for postMessage and check event origin on got message

@unitybase/blob-stores #

Fixed #

5.24.47 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1

@unitybase/cs-shared #

Fixed #

5.24.20 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1
  • SECURITY prevent potential path traverse attack in MDB BLOB store

@unitybase/openid-connect #

Fixed #

5.25.7 2026-07-01 #
  • SECURITY fixed Cross-site Scripting in cookie module: upgraded cookie@0.5 -> cookie@0.7.2

@unitybase/pdf #

Fixed #

5.3.10 2026-07-01 #
  • SECURITY prevent XML Injection by upgrading @xmldom/xmldom@0.8.10 -> @xmldom/xmldom@0.8.13

@unitybase/ub-pub #

Added #

5.24.49 2026-07-01 #
  • UBConnection.getCurrentSession() method to synchronously return the current UBSession, or undefined when the user is not authorized

Fixed #

5.24.49 2026-07-01 #
  • LocalRepository.selectAsArray: now resolves with the correct total when the requested attribute list differs from the source field order (previously undefined, which blanked the pagination total result)

@unitybase/ubq #

Fixed #

5.24.86 2026-07-01 #
  • SECURITY use new Function pattern instead of eval for evaluating of scheduler condition

@unitybase/ubs #

Added #

5.24.92 2026-07-01 #
  • ubs_message-fm: added props isDetail (toggles master-detail layout), messageIcons (custom map of message type → icon CSS class) and showOnlyUnread (filters list to unread messages only)

@unitybase/udisk #

Fixed #

5.24.69 2026-07-01 #
  • SECURITY fixed Arbitrary Code Injection by updating lodash@4.17.21 -> 4.18.1