CADCraft Advances with Security Enhancements and Feature Improvements in Recent Releases

About CADCraft

CADCraft is a modern, open-source computer-aided design (CAD) and drafting application written entirely in Rust. It targets parity and potential superiority with Autodesk AutoCAD in terms of speed and functionality. The project supports both 2D and 3D CAD workflows and is designed for developers and technical users interested in a clean-room, high-performance CAD tool. CADCraft is used across multiple platforms including Windows, macOS, Linux, and FreeBSD, and is notable for its open development process and community contributions.

Release v0.11.0 Highlights

Released on October 22, 2026, version 0.11.0 of CADCraft introduced several documentation and continuous integration (CI) improvements. Notably, the release added SonarCloud and CodeRabbit badges to the README for better project health visibility and switched to a shared Nix workflow for CI processes. Security was enhanced by enforcing HTTPS on curl downloads.

Functionality improvements included fixes and enhancements to AutoLISP support, such as improved symbol comparison and selection prompts. The release also addressed polyline bulge handling, DWG and DXF file handling improvements, and multileader sizing corrections. The project dropped support for FreeBSD aarch64 due to CI build time constraints but retained FreeBSD x86_64 and other platforms.

Release v0.12.0 Highlights

The October 23, 2026 release focused heavily on security hardening. Multiple vulnerabilities were addressed, including:

Atomic file writing to prevent race conditions.
Restrictions on directory symlink following to avoid resource exhaustion.
Limits on geometry kernel complexity and rendering pipeline to mitigate denial-of-service (DoS) risks.
Authentication improvements for the local control server using per-session tokens.
Bounds on font outline geometry and text scanning to prevent excessive resource use.
Safeguards on DXF to DWG conversion and document decoding.

This release also reiterated the dropping of FreeBSD aarch64 support due to CI limitations.

Release v0.13.0 Highlights

Published on October 25, 2026, the latest release combines extensive feature development, bug fixes, and ongoing security improvements:

Documentation was enhanced to clearly state security limits and regression guarantees.
Dependency updates were applied across multiple components.
Web usability was improved by allowing browser zoom in the viewport meta tag.
Shell scripts were refactored for better maintainability and security.
CI workflows were optimized with one test binary per crate and shared gate workflows, including FreeBSD nightly builds.
Internationalization efforts continued with new translations and terminology reviews.
DXF/DWG support was improved to preserve arrowhead blocks and maintain polyline vertex order.
User interface enhancements included fixing cursor visibility over menus, adding a center rectangle construction mode, and preventing flickering on file tab close buttons.
New commands and tools were introduced, such as CUTBASE for clipboard cutting with base points, BLOCKREPLACE for replacing blocks, and MEASUREGEOM extensions for volume, angle, and radius measurements.
Dimensioning was refined to handle text overflow better and apply background fills.
Security improvements continued with atomic release writing and better handling of input parsing to reject malformed or potentially harmful inputs.

The release also welcomed numerous new contributors, reflecting a growing and active community.

Summary

These three releases of CADCraft demonstrate a clear focus on security hardening, platform support management, and incremental feature additions that improve both usability and file compatibility. The dropping of FreeBSD aarch64 support highlights ongoing challenges with CI infrastructure for certain platforms. The project’s commitment to documentation, internationalization, and community contributions positions it as a promising open-source alternative in the CAD software space.