Download Latest Version BookStack v26.03.2 source code.tar.gz (4.5 MB)
Email in envelope

Get an email when there's a new version of BookStack

Home / v25.12.9
Name Modified Size InfoDownloads / Week
Parent folder
BookStack v25.12.9 source code.tar.gz 2026-03-12 4.4 MB
BookStack v25.12.9 source code.zip 2026-03-12 5.7 MB
README.md 2026-03-12 928 Bytes
Totals: 3 Items   10.1 MB 0

Security Release

BookStack v25.12.9 has been released.

This is a security release to address a vulnerability where style code in page content could be used to manipulate the page beyond the expected content area in some revision views, opening up risk of potential phishing and/or tracking by bad page editors.

We advise that you update your instance if you allow untrusted users to create or edit pages.

Thanks to Alex Dan (@windbreaker555 on GitHub) for their responsible discovery and reporting of this issue.

Full List of Changes

  • Updated page revision diffs to use content filtering.
  • Updated preference change redirect with stronger origin checks.
  • Updated application PHP dependencies.
Source: README.md, updated 2026-03-12