Embed Notice

HTML Code

<blockquote style="position: relative; padding-left: 55px;"><section><a href="https://fosstodon.org/users/hedgedoc/statuses/113936659752740048">HedgeDoc 🦔 (hedgedoc@fosstodon.org)'s status on Monday, 03-Feb-2025 19:46:30 JST</a><a href="https://fosstodon.org/@hedgedoc" title="hedgedoc@fosstodon.org"><img src="https://gnusocial.jp/avatar/138112-48-20250203104630.webp" width="48" height="48" alt="HedgeDoc 🦔" style="position: absolute; left: 0; top: 0;">HedgeDoc 🦔</a></section><article><p>We've just released <a href="https://fosstodon.org/tags/HedgeDoc" rel="tag">#HedgeDoc</a> 1.10.1 🎉</p><p>⚠️ This release contains a medium severity security fix for users of the local email/password login!  ⚠️</p><p>Read the full changelog on <a href="https://hedgedoc.org/releases/1.10.1/" rel="nofollow noreferrer">https://hedgedoc.org/releases/1.10.1/</a></p></article><footer><a rel="bookmark" href="https://gnusocial.jp/conversation/4499633#notice-8810829">In conversation</a><time datetime="2025-02-03T19:46:30+09:00" title="Monday, 03-Feb-2025 19:46:30 JST">about 2 months ago</time> <span>from <span><a href="https://fosstodon.org/@hedgedoc/113936659752740048" rel="external" title="Sent from fosstodon.org via ActivityPub">fosstodon.org</a></span></span><a href="https://fosstodon.org/@hedgedoc/113936659752740048">permalink</a><h4>Attachments</h4><ol><li><article><header><div>Domain not in remote thumbnail source whitelist: hedgedoc.org</div><h5><a href="https://hedgedoc.org/releases/1.10.1/">HedgeDoc 1.10.1</a></h5><div> from <span>The HedgeDoc developers</span></div></header><div>This release fixes a security issue where brute-forcing local email/passwords is possible because of missing rate-limits. We recommend upgrading as soon as possible, if you use local logins.</div><footer></footer></article></li></ol></footer></blockquote>

Corresponding Notice

Embed this notice
HedgeDoc 🦔 (hedgedoc@fosstodon.org)'s status on Monday, 03-Feb-2025 19:46:30 JST HedgeDoc 🦔
We've just released #HedgeDoc 1.10.1 🎉
⚠️ This release contains a medium severity security fix for users of the local email/password login! ⚠️
Read the full changelog on https://hedgedoc.org/releases/1.10.1/
In conversationabout 2 months ago from fosstodon.orgpermalink
Attachments
1. Domain not in remote thumbnail source whitelist: hedgedoc.org
  HedgeDoc 1.10.1
  from The HedgeDoc developers
  This release fixes a security issue where brute-forcing local email/passwords is possible because of missing rate-limits. We recommend upgrading as soon as possible, if you use local logins.

Public

Embed Notice

HTML Code

Corresponding Notice