# v4.4.1 - CVE Remediation (minimatch)

Released: February 27, 2026

## Highlights

- **Security Patch** — Fixed 2 HIGH severity CVEs in minimatch that blocked Docker deployment

---

## Security

### CVE-2026-27903 (minimatch) — HIGH

Inefficient algorithmic complexity vulnerability in minimatch >=10.0.0, <10.2.3 (CVSS 7.5). Added npm override `minimatch@^10.2.3`.

### CVE-2026-27904 (minimatch) — HIGH

Inefficient regular expression complexity (ReDoS) in minimatch >=10.0.0, <10.2.3 (CVSS 7.5). Same fix as CVE-2026-27903.

---

## Upgrade

```bash
# npm
npm update -g memory-journal-mcp

# Docker
docker pull writenotenow/memory-journal-mcp:v4.4.1
```

**Full Changelog**: https://github.com/neverinfamous/memory-journal-mcp/wiki/CHANGELOG
