HedgeDoc logo

HedgeDoc

Real-time collaborative markdown notes

Alternative to: hackmd, google docs, notion

HedgeDoc screenshot

About Versions (41)

1.10.3

2025-04-09

Security fixes

This release fixes a security issue of a possible XSS exploit which can be planted via a malicous SVG file upload.

See CVE-2025-32391 for more details

Enhancements

  • Add config options CMD_SAML_WANT_ASSERTIONS_SIGNED and CMD_SAML_WANT_AUTHN_RESPONSE_SIGNED for SAML auth, since some instances didn’t comply with the new defaults of @node-saml/passport-saml