Skip to main content

Monitor 10.2.5

Released: October 2026
Previous version: 10.2.4
Docker Registry: registry.frafos.net/abc/mon:10.2.5

Features​

  • Security update: the Node.js runtime is upgraded to 22.23.4, which fixes the vulnerabilities published in the Node.js October 2026 security releases. Among them are a Brotli decoder out-of-bounds write that could allow remote code execution (CVE-2026-111497), two TLS hostname verification bypasses (CVE-2026-105483, CVE-2026-106069) and dns.resolve truncating names that contain NUL characters (CVE-2026-105482). Images are now always built from freshly pulled base images, so future Node.js 22 security releases are included as soon as a new build is made. The undici HTTP client dependency is updated to 7.30.1. Upgrading from 10.2.4 is recommended. [#1913]
  • In the call flow diagram, the button row, the host checkboxes and the host legend now stay in place while scrolling; only the messages area scrolls, and the legend follows it horizontally. The exported HTML diagram behaves the same way. [#1864]

Fixes​

  • The API description in the Swagger documentation now expands SBC as Session Border Controller instead of Single Board Computer. [#1876]