##EQM - v0.1.23.1-beta — “Ooops, Let’s Patch That!” Hotfix
A production deployment issue exposed EQM’s Vite development server to the public internet. Automated scanners found it before they found anything useful, and this hotfix closes that door.
Hotfix: Hotfix Release v0.1.23.1-beta
Security fixes
- Replaced the Vite development server with a compiled frontend served by Nginx.
- Restricted frontend, backend, PostgreSQL, and Redis ports to the host.
- Blocked Vite-specific and hidden-file probes.
- Added security headers and rotating access logs.
- Updated vulnerable Nano ID and PostCSS dependencies.
- Marked Linux maintenance scripts executable.
No evidence of credential or sensitive-file disclosure was found. Updating is strongly recommended for remotely hosted EQM installations.