BookStack
v26.09.3NOW MANAGED ON CODEBERG
- Maintenance
- Active73 commits in 3 months · bus factor 1
- License
- MITPermissive · OSI-approved
- Security
- 8 advisories2 high, 4 medium, 2 low · Scorecard 3.2/10
- Supported versions
- No scheduleendoflife.date does not track this project
19.1k stars · 2.4k forks · 3 open issues · last release 4 days ago · data checked 37 minutes ago
Security advisories
All advisories on GitHubThe 8 most recent advisories published by the maintainers: 2 high, 4 medium, 2 low. Check the patched version against the one you run.
- highDec 18, 2020Restricted page content visible through plaintext export
- Affected
- < v0.30.7
- Patched in
- v0.30.7
- mediumDec 17, 2020Restricted pages, sat within chapters, accessible without permission in certain circumstances
- Affected
- < v0.30.6
- Patched in
- v0.30.6
- mediumCVE-2020-26260Dec 6, 2020Server Side Request Forgery Through Content Exports
- Affected
- >= v0.7 && < v0.30.5
- Patched in
- v0.30.5
- mediumCVE-2020-26211Oct 31, 2020Cross-Site Scripting and Redirects Through Page Content
- Affected
- < v0.30.4
- Patched in
- v0.30.4
- lowCVE-2020-26210Oct 31, 2020Cross-Site Scripting Through Link Attachments
- Affected
- < v0.30.4
- Patched in
- v0.30.4
- lowMay 12, 2020Names of Restricted Books Visible Through Shelves List View
- Affected
- >= v0.28.0 && < v0.29.3
- Patched in
- v0.29.3
- mediumCVE-2020-11055May 2, 2020Cross-Site Scripting Through Comment Creation
- Affected
- >= v0.18.0 && < v0.29.2
- Patched in
- v0.29.2
- highCVE-2020-5256Mar 8, 2020Remote Code Execution Through Image Uploads
- Affected
- < 0.25.5
- Patched in
- 0.25.3, 0.25.4, 0.25.5