Skip to main content

Release Notes: 20.0.6

Version 20.0.6 adds product availability based on account source and support for Vault names containing spaces, while improving saved-card availability and updating the Stripe integration.

This release also patches the critical PHP vulnerabilities known as PHP2Shell, disclosed in October 2026.
It also fixes synchronization with folder-level permissions and improves permission and lock handling.

Features, Improvements and Bug Fixes​

Features​

  • [Feature] Added product availability based on account source
  • [Feature] Added support for Vault names containing spaces

Improvements​

  • [Improvement] Improved saved-card availability
  • [Improvement] Updated the Stripe integration
  • [Improvement] Improved permission and lock handling

Bug Fixes​

  • [BugFix] Patched PHP against the critical PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619)
  • [BugFix] Fixed synchronization with folder-level permissions
  • [BugFix] General reliability and usability fixes