# n8n n8n@0.215.3 — Release & Upgrade Intelligence
- **Product:** n8n (https://n8n.io)
- **Version:** n8n@0.215.3
- **Released:** Feb 23, 2023
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/n8n/updates/n8n-0.215.3/

## Executive Summary (TL;DR)
n8n n8n@0.215.3. Source highlight: **core:** Do not allow arbitrary path traversal in BinaryDataManager (#5523) (f7079da)

## Bug Fixes
- **core:** Do not allow arbitrary path traversal in BinaryDataManager (#5523) (f7079da)
- **core:** Do not allow arbitrary path traversal in the credential-translation endpoint (#5522) (14d2a88)
- **core:** Do not explicitly bypass auth on urls containing `.svg` (#5525) (0b568ee)
- **core:** Do not remove empty output connections arrays in PurgeInvalidWorkflowConnections migration (#5546) (a31cb05)
- **core:** User update endpoint should only allow updating email, firstName, and lastName (#5526) (d530e20)