gobookmarks

v1.8.21 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 19d Dashboards & Home Pages

✓ No known CVEs patched

This release patches 1 known CVE

Topics

bookmarks github github-api go home-page homepage

+4 more

live-bookmarks start-page startpage web

Affected surfaces

auth

Summary

AI summary

Fixes open‑redirect vulnerability that could be exploited via the login flow.

Full changelog

0fd5211364569a281b65b0e62ba5d48339d20426 Merge pull request #225 from arran4/dependabot/golang-org-x-image-tiff-excessive-resource-consumption-3971930352942816695
902f064bbd6bc27a2a11a20a0a7548f964f889d3 Merge pull request #226 from arran4/fix-login-redirect-6656424172380060602
f13ae04528a111c1833b40d97dc6eec2dc3f1465 Update golang.org/x/image to fix Dependabot alert
fdc004527904ee06db8391d9c23df6ef7a2558dc feat: preserve current page and redirect back after login
c9641a9afdc44309259ab7713ff73d4f2b3df5f6 fix: address security feedback on open redirects

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track gobookmarks

Get notified when new releases ship.

About gobookmarks

Landing page to display bookmarks stored in GitHub, GitLab or local Git. `AGPL-3.0` `Go/Docker`