preflight
Back to changelog
Jul 15, 2026 v0.12.31

Safer WebP image scanning and installs

This release focuses on stability and safety when scanning WebP images, plus a small but important fix to installation extraction.

Security and stability for WebP image scanning

WebP decoding has been updated to address two reachable panics in the WebP decoder (GO-2026-5061 and GO-2026-4961). This helps prevent unexpected crashes when scanning sites that serve WebP images for og:image.

More reliable installation extraction

The installer now extracts the downloaded archive correctly when it does not include a wrapping directory. This reduces install failures caused by mismatched archive structure.

Tags

Security Bug Fix