HedgeDoc

This release addresses four security vulnerabilities including HTML injection, DoS, CSRF, and rate-limiting bypass, while adding external link warnings and configuration enhancements.

Fixes data loss during concurrent editing and prevents crashes from invalid hex color values.

Fixed issues with cursor color formatting, realtime connection closure, and CLI error handling.

This release addresses two medium severity security vulnerabilities related to upload file headers and SVG script execution, alongside dependency updates and documentation improvements.

Fixed the bundled healthcheck in the Docker container.

This release includes two low-severity security fixes, Node 24 compatibility, and a new configuration option to restrict file uploads.

This release fixes a security vulnerability related to XSS via SVG uploads and adds new SAML authentication configuration options.

This release updates SAML authentication attribute mappings for security and fixes OAuth2 and SAML login bugs.

This release fixes a security vulnerability via login rate-limiting, updates HSTS preload defaults, and deprecates Node 18 support.

This release introduces OpenID Connect/OAuth2 support, private S3/Azure storage, and various editor enhancements, while requiring Node 20.

This release fixes a MySQL security issue, adds a read-only configuration option, and drops support for Node 16.

Alpha 2 introduces various bug fixes for the markdown renderer, user list, code suggestions, and UI elements.

HedgeDoc 2 alpha 1 is released as a complete rewrite of the collaborative markdown editor to improve maintainability and add new features.

This release addresses a security vulnerability regarding existing notes and adds support for Docker secrets in OAuth2 client secrets.

This release drops support for Node 14, migrates to Yarn 3, and introduces various enhancements including a healthcheck endpoint and arm64 Docker support.

Fixed issues with special characters in note titles during export and the night-mode toggle functionality.

Fixed a critical bug where migrations would delete all notes when using SQLite.

This release introduces a dark mode toggle for mobile, improves XSS security, and fixes several crashes, but contains a critical data-loss bug for SQLite users.

This release drops support for Node 12, adds more S3 configuration options, and optimizes migrations by removing unexpected shell calls.

This release addresses a security vulnerability regarding upload file names, introduces several enhancements to avatars and SAML authentication, and fixes various bugs.

Fixed a session handler error occurring during requests to the /metrics and /status endpoints.

This release increases the minimum required Node versions and includes bugfixes for Safari CSP handling, GitLab API crashes, and Hungarian language issues.

This release addresses security vulnerabilities, improves database connectivity, optimizes the frontend bundle size, and removes MSSQL support.

This release includes critical security fixes for XSS, removes MSSQL support, introduces new CSP configuration options, and improves frontend bundle size.

This release addresses two security vulnerabilities, including a cross-site scripting (XSS) vector in notes and profile handling.

This release improves build performance via esbuild and dependency optimization, enhances editor list/quote behavior, and fixes several startup and UI bugs.

This release addresses several security vulnerabilities, introduces automatic database migrations and a Prometheus endpoint, and drops support for Node 10.

This release addresses critical security vulnerabilities, drops support for Node 10, and introduces automatic database migrations and a Prometheus metrics endpoint.

This release fixes a stored XSS security vulnerability in slide mode and corrects a markdown editor status bar display issue.

This release addresses two security vulnerabilities involving arbitrary file uploads and stored XSS in mermaid diagrams.

The project has been renamed to HedgeDoc, introducing OIDC/SAML enhancements, pre-bundled frontend tarballs, and various bugfixes.

This release includes bugfixes for OAuth2 configuration crashes and SequelizeMeta table handling on MySQL/MariaDB.

The project has been renamed to HedgeDoc, featuring OIDC and SAML enhancements, bug fixes, and bundled frontend assets.

Version 1.6 introduces AWS endpoint options, OpenGraph support, various feature enhancements, and bug fixes, while marking the end of support for Node 8.

This update introduces ARM container support, disables PDF export for security, adds Do-Not-Track support, and includes various bug fixes and translations.

Version 1.4.0 introduces various enhancements, security fixes, and language updates while dropping support for Node.js 6.

CodiMD has moved to its own organization with updated repository links and a night mode UI fix.

This release adds Serbian language support, improves translations, and fixes several bugs related to redirects, PDF export, and API integrations.

This release introduces OpenID support, updates several core dependencies, refactors the frontend build system to Webpack 4, and includes numerous bug fixes and security patches.

This release introduces unix sockets support, new translations, Cloudron installation, and various bug fixes, while deprecating NodeJS 6 and Mattermost login integration.

HackMD CE is renamed to CodiMD, featuring new OAuth2 support, Azure blob storage for images, account deletion, and various editor enhancements.