Type

App update

App

App ID: bassin
Upstream project: blockdyor/bassin
Version: 2.1.4

Summary

This update brings stability, security, and maintenance improvements to the Bassin UI:

• Sanitizes user directory parsing against path traversal and web server autoindex parent links (such as ../).
• Adds resilient error handling around localStorage parsing to prevent UI crashes from corrupted browser storage.
• Updates build dependencies to resolve all audit vulnerabilities.
• Updates the footer repository link to point to blockdyor/bassin with safe new-tab navigation.

The underlying ckpool service is unchanged.

Verification

Environment tested:

• Umbrel device
• Local umbrelOS test environment
• Not runtime tested

Architecture tested:

• amd64
• arm64

Known lint warnings or caveats:

• None expected

Notes

Permissions, dependencies, migrations, default credentials, or caveats:

• No permission changes
• No dependency changes
• No migrations
• No default credential changes
• No known caveats