Download Latest Version BookStack v26.03.2 source code.tar.gz (4.5 MB)
Email in envelope

Get an email when there's a new version of BookStack

Home / v26.03.1
Name Modified Size InfoDownloads / Week
Parent folder
BookStack v26.03.1 source code.tar.gz 2026-03-17 4.5 MB
0
BookStack v26.03.1 source code.zip 2026-03-17 5.7 MB
0
README.md 2026-03-17 940 Bytes
0
Totals: 3 Items   10.2 MB 0

Security Release

This is a security release to address a vulnerability where page content, which should be hidden by permissions, could be visible during certain markdown exports.

We strongly advise that you update your instance if you use permissions to control page visibility.

Thanks to Ghufran Raza Khan (GitHub Profile, LinkedIn Profile) for responsibly reporting this issue. Also thanks to Alex Dan (GitHub Profile) for also reporting this before public announcement.

Full List of Changes

  • Updated queries used for pages in markdown exports.
  • Updated handling of filenames for file serving.
  • Updated PHP package versions.
Source: README.md, updated 2026-03-17