# HedgeDoc 1.10.6 — HedgeDoc 1.10.6

- Product: HedgeDoc (https://whatsnew.fyi/product/hedgedoc)
- Vendor: HedgeDoc
- Date: 2026-02-04
- Version: 1.10.6
- Original notes: https://github.com/hedgedoc/hedgedoc/releases/tag/1.10.6
- Permalink: https://whatsnew.fyi/product/hedgedoc/releases/1.10.6

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fix security headers not being set correctly for upload files
- **security** — Fix potential security issues with limited script execution in uploaded SVG files

###### Security fixes

This release contains two medium severity security fixes:
- [CVE-2026-25642](https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-x74j-jmf9-534w) reports a bug where security headers for upload files were not set correctly.
- [GHSA-672m-p72w-gw28](https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-672m-p72w-gw28) reports potential security issues with limited script execution in uploaded SVG files.

Thanks to [@HUSEYNKHANLI](https://github.com/HUSEYNKHANLI) and [@drkim-dev](https://github.com/drkim-dev) for reporting!

###### Maintenance

- Dependency updates
- Enhancements in the documentation at [docs.hedgedoc.org](https://docs.hedgedoc.org)

###### Contributors
- [xenein](https://github.com/xenein) (#6322)