Vault (Hotfix) — Release Notes

Web App and API version:

This update kills a serious security bug.

Bug fixes

  • Data disclosure bug in the ‘download as ZIP’ API end-point has been squashed.
  • Desktop agents now properly create roots in clients that sync 200+ top-level folders.
  • The desktop agent’s hydration method has several performance improvements.

A huge thank you goes out to the researcher who discovered the API vulnerability, and we’ll be publishing a blog post soon that details exactly what was found, and how we’ve fixed it.

Sign up for our Newsletter

We promise not to spam you.