# n8n n8n@0.214.4 — Release & Upgrade Intelligence
- **Product:** n8n (https://n8n.io)
- **Version:** n8n@0.214.4
- **Released:** Feb 23, 2023
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/n8n/updates/n8n-0.214.4/

## Executive Summary (TL;DR)
n8n n8n@0.214.4. Source highlight: **core:** Do not allow arbitrary path traversal in BinaryDataManager (#5523) (df3f23e)

## Bug Fixes
- **core:** Do not allow arbitrary path traversal in BinaryDataManager (#5523) (df3f23e)
- **core:** Do not allow arbitrary path traversal in the credential-translation endpoint (#5522) (397e42d)
- **core:** Do not explicitly bypass auth on urls containing `.svg` (#5525) (a8ca2b1)
- **core:** Do not remove empty output connections arrays in PurgeInvalidWorkflowConnections migration (#5546) (e6a554f)
- **core:** User update endpoint should only allow updating email, firstName, and lastName (#5526) (d622827)