1.10.8-ls190

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.8-ls190/index.html

LinuxServer Changes:

Full Changelog: 1.10.8-ls189...1.10.8-ls190

Remote Changes:

Bugfixes

• Fix data loss when 5+ users edit a document concurrently, caused by the OT client discarding operations during revision gap recovery (#6342)
• Add defensive null checks to hex2rgb to prevent crashes from non-hex color values

Maintenance

• Dependency updates

Contributors

• Dex Devlon

1.10.8-ls189

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.8-ls189/index.html

LinuxServer Changes:

Full Changelog: 1.10.8-ls188...1.10.8-ls189

Remote Changes:

Bugfixes

• Fix data loss when 5+ users edit a document concurrently, caused by the OT client discarding operations during revision gap recovery (#6342)
• Add defensive null checks to hex2rgb to prevent crashes from non-hex color values

Maintenance

• Dependency updates

Contributors

• Dex Devlon

1.10.8-ls188

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.8-ls188/index.html

LinuxServer Changes:

Full Changelog: 1.10.7-ls187...1.10.8-ls188

Remote Changes:

Bugfixes

• Fix data loss when 5+ users edit a document concurrently, caused by the OT client discarding operations during revision gap recovery (#6342)
• Add defensive null checks to hex2rgb to prevent crashes from non-hex color values

Maintenance

• Dependency updates

Contributors

• Dex Devlon

1.10.7-ls187

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.7-ls187/index.html

LinuxServer Changes:

Full Changelog: 1.10.7-ls186...1.10.7-ls187

Remote Changes:

Bugfixes

• Random colors for user's cursors and selections are now always in hex format to avoid conversion errors
• Correctly close realtime connections if they disconnect during connection creation
• manage_users CLI does not silently drop errors

1.10.7-ls186

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.7-ls186/index.html

LinuxServer Changes:

Full Changelog: 1.10.7-ls185...1.10.7-ls186

Remote Changes:

Bugfixes

• Random colors for user's cursors and selections are now always in hex format to avoid conversion errors
• Correctly close realtime connections if they disconnect during connection creation
• manage_users CLI does not silently drop errors

1.10.7-ls185

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.7-ls185/index.html

LinuxServer Changes:

Full Changelog: 1.10.7-ls184...1.10.7-ls185

Remote Changes:

Bugfixes

• Random colors for user's cursors and selections are now always in hex format to avoid conversion errors
• Correctly close realtime connections if they disconnect during connection creation
• manage_users CLI does not silently drop errors

1.10.7-ls184

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.7-ls184/index.html

LinuxServer Changes:

Full Changelog: 1.10.7-ls183...1.10.7-ls184

Remote Changes:

Bugfixes

• Random colors for user's cursors and selections are now always in hex format to avoid conversion errors
• Correctly close realtime connections if they disconnect during connection creation
• manage_users CLI does not silently drop errors

1.10.7-ls183

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.7-ls183/index.html

LinuxServer Changes:

Full Changelog: 1.10.6-ls182...1.10.7-ls183

Remote Changes:

Bugfixes

• Random colors for user's cursors and selections are now always in hex format to avoid conversion errors
• Correctly close realtime connections if they disconnect during connection creation
• manage_users CLI does not silently drop errors

1.10.6-ls182

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.6-ls182/index.html

LinuxServer Changes:

Full Changelog: 1.10.6-ls181...1.10.6-ls182

Remote Changes:

Security fixes

This release contains two medium severity security fixes:

• CVE-2026-25642 reports a bug where security headers for upload files were not set correctly.
• GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files.

Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!

Maintenance

• Dependency updates
• Enhancements in the documentation at docs.hedgedoc.org

Contributors

• xenein (#6322)

1.10.6-ls181

CI Report:

https://ci-tests.linuxserver.io/linuxserver/hedgedoc/1.10.6-ls181/index.html

LinuxServer Changes:

Full Changelog: 1.10.5-ls180...1.10.6-ls181

Remote Changes:

Security fixes

This release contains two medium severity security fixes:

• GHSA-x74j-jmf9-534w reports a bug where security headers for upload files were not set correctly.
• GHSA-672m-p72w-gw28 reports potential security issues with limited script execution in uploaded SVG files.

Thanks to @HUSEYNKHANLI and @drkim-dev for reporting!

Maintenance

• Dependency updates
• Enhancements in the documentation at docs.hedgedoc.org

Contributors

• xenein (#6322)