Thank you for downloading HedgeDoc 1.7.1

Details

• This is NOT the latest release! Please take a look at the release list
• This is a stable release
•  View on GitHub

Release notes

• This release fixes two security issues. We recommend upgrading as soon as possible.

  Security Fixes

  • CVE-2020-26286: Arbitrary file upload
    An unauthenticated attacker can upload arbitrary files to the upload storage backend.
  • CVE-2020-26287: Stored XSS in mermaid diagrams
    An attacker can inject arbitrary script tags in HedgeDoc notes using mermaid diagrams.

Documentation

Do you need help with installation or upgrade? Read our docs!