WavPack 5.5.0 contains a fix for CVE-2021-44269 wherein encoding a specially crafted DSD file causes an out-of-bounds read exception.
The other major change was the addition of the --drop option and the ability to add brace-delimited default option parameters to the executable filename (thanks to @Porcus for the inspiration). On Windows, these improvements make using the WavPack executable icons as "drag and drop" targets much easier and more flexible. For details on using this feature see the user manual.
For the remaining minor fixes and improvements, see the official NEWS file.
Binaries and source can be found on the GitHub release page or the WavPack downloads page.
Note that I am no longer able to generate binaries for macOS. These should probably be obtained from HomeBrew anyway, which has been updated to 5.5.0.

