# Security Patches & Structured Logging | Changelog

Source: https://wraps.dev/changelog/security-patches-and-structured-logging

![Wraps Logo](https://wraps.dev/wraps-light-logo.png)![Wraps Logo](https://wraps.dev/wraps-dark-logo.png)

](https://wraps.dev/)

[](https://github.com/wraps-team/wraps)[Log in](https://app.wraps.dev/auth?mode=signin)[Sign up](https://app.wraps.dev/auth?mode=signup)

Toggle menu

[← All changes](https://wraps.dev/changelog)

DashboardFebruary 2026

### Security Patches & Structured Logging

-   Patched XSS, cross-org IDOR, and RCE vulnerabilities
-   Timing-safe secret comparison across all auth paths
-   Resolved 22 Dependabot alerts via dependency upgrades and pnpm overrides
-   Migrated entire API from console logging to structured JSON logging
-   Canonical log lines per authenticated request for debugging and analytics
-   PostHog error tracking on API and Stripe webhooks
-   Cross-org IDOR prevention: all queries scoped by `organizationId` from auth context
-   Guardrail system with Biome GritQL plugins and architecture tests

Security & Observability