8000 Release HedgeDoc 1.10.6 · hedgedoc/hedgedoc · GitHub
[go: up one dir, main page]

Skip to content
< 8000 link crossorigin="anonymous" rel="modulepreload" href="https://github.githubassets.com/assets/t7l-8213ea7f1bea9e80.js" fetchpriority="low" />

HedgeDoc 1.10.6

Choose a tag to compare

@ErikMichelson ErikMichelson released this 04 Feb 19:33
· 7276 commits to develop since this release

Security fixes

This release contains two medium severity security fixes:

  • CVE-2026-25642 reports a bug where security headers for upload files were not set correctly.
  • GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files.

Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!

Maintenance

Contributors

0