1.10.6
HedgeDoc 1.10.6
Security 2
- Fix security headers not being set correctly for upload files
- Fix potential security issues with limited script execution in uploaded SVG files
Security fixes
This release contains two medium severity security fixes:
- CVE-2026-25642 reports a bug where security headers for upload files were not set correctly.
- GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files.
Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!
Maintenance
- Dependency updates
- Enhancements in the documentation at docs.hedgedoc.org
Contributors
- xenein (#6322)