Thank you for downloading HedgeDoc 1.7.1

Back to the release list

Details

This is the latest release
This is a stable release
View on GitHub

Release notes

This release fixes two security issues. We recommend upgrading as soon as possible.
Security Fixes
- CVE-2020-26286: Arbitrary file upload
  An unauthenticated attacker can upload arbitrary files to the upload storage backend.
- CVE-2020-26287: Stored XSS in mermaid diagrams
  An attacker can inject arbitrary script tags in HedgeDoc notes using mermaid diagrams.

Documentation

Do you need help with installation or upgrade? Read our docs!

Download

Bundled and ready to use
hedgedoc-1.7.1.tar.gz (50.79 MB)
Just the source code
Source code
Docker
Our docker images are located on quay.io at hedgedoc/hedgedoc.
Debian-based image
You can pull our docker image directly with the command below. It is based on Debian Linux (221.30 MB).
```
docker pull quay.io/hedgedoc/hedgedoc:1.7.1
```
Alpine-based image
The alpine-based image is much smaller than the debian-based image, but does not contain glibc resulting in some debugging software not working properly in the container.
```
docker pull quay.io/hedgedoc/hedgedoc:1.7.1-alpine
```