PocketBase: v0.22.29 Release

Source available — automated, not human-reviewed

Component: pocketbase · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes

📄 .MD

🔧 Bug Fixes 1

⚡ Executive Summary (TL;DR)

PocketBase v0.22.29. Source highlight: (_Backported from v0.23.11_) Upgraded `golang.org/x/net` to 0.33.0 to fix CVE-2024-45338.

Visit PocketBase Official Site ↗ Official Release Source ↗ All PocketBase Releases 📡 PocketBase RSS

Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

🔧 Bug Fixes & Patches (1)

(_Backported from v0.23.11_) Upgraded `golang.org/x/net` to 0.33.0 to fix CVE-2024-45338.

📄 View Raw Release Notes (Original Developer Log)

- (_Backported from v0.23.11_) Upgraded `golang.org/x/net` to 0.33.0 to fix [CVE-2024-45338](https://www.cve.org/CVERecord?id=CVE-2024-45338). _PocketBase uses the vulnerable functions primarily for the auto html->text mail generation, but most applications shouldn't be affected unless you are manually embedding unrestricted user provided value in your mail templates._

← Older Version PocketBase v0.23.10 Newer Version → PocketBase v0.23.11