HedgeDoc
Real-time collaborative markdown notes
Alternative to: hackmd, google docs, notion
About
Versions (41)
1.7.1
2020-12-27This release fixes two security issues. We recommend upgrading as soon as possible.
Security Fixes
- CVE-2020-26286: Arbitrary file upload
An unauthenticated attacker can upload arbitrary files to the upload storage backend. - CVE-2020-26287: Stored XSS in mermaid diagrams
An attacker can inject arbitrary script tags in HedgeDoc notes using mermaid diagrams.