March 19, 2026

Security Patch, Admin Rate Limits & Bug Fixes

Security

  • Updated a dependency (CommonMark) to patch a security vulnerability (CVE-2026-33347)

Admin

  • New admin UI for configuring rate limit capacity and speed per cruise line, saved to Redis so changes persist across restarts
  • Package price jobs now break into individual per-sailing tasks instead of one large batch -- easier to monitor and more resilient to failures

Bug Fixes

  • Fixed MSC scraper timeout that was causing false failure reports on empty date ranges
  • Chart colors now stay consistent when filters change -- no more rainbow shuffle
  • Fixed stale account references in casino analytics after account changes
  • Background workers no longer load full API response blobs into memory when they don't need them -- prevents out-of-memory crashes on large responses