# v3.1.1 - Security Patch

**Release Date:** January 11, 2026

## Security Fixes

### Docker Image Security

- **Alpine Package Upgrades** — Added `apk upgrade --no-cache` to builder stage to ensure latest security patches for base OS packages
  - Fixes CVE-2026-22184 (zlib critical)
  - Fixes CVE-2025-14524, CVE-2025-14819, CVE-2025-14017 (curl)

### NPM Dependency Overrides

- **Added `glob` override** — `^11.1.0` to fix CVE-2025-64756 (ReDoS vulnerability)

### Build Fix

- **Regenerated `package-lock.json`** — Fixed CI build failure caused by lock file desync with MCP SDK peer dependencies

---

## Installation

**npm:**

```bash
npm install -g memory-journal-mcp@3.1.1
```

**Docker:**

```bash
docker pull writenotenow/memory-journal-mcp:3.1.1
```

---

## Links

- [Full Changelog](https://github.com/neverinfamous/memory-journal-mcp/wiki/CHANGELOG)
- [v3.1.0 Release Notes](https://github.com/neverinfamous/memory-journal-mcp/releases/tag/v3.1.0)
