CI Report:
https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.6-ls182/index.html
LinuxServer Changes:
Full Changelog: 1.10.6-ls181...1.10.6-ls182
Remote Changes:
Security fixes
This release contains two medium severity security fixes:
- CVE-2026-25642 reports a bug where security headers for upload files were not set correctly.
- GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files.
Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!
Maintenance
- Dependency updates
- Enhancements in the documentation at docs.hedgedoc.org
Contributors
- xenein (#6322)