Scoold

v1.69.3 Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 18d Productivity & Wikis

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

clone cloud-native community-forums forum forum-software forums

+14 more

forumsoftware java knowledge-base knowledgebase q-and-a questions-and-answers scoold self-hosted spring-boot stackexchange stackoverflow stackoverflow-questions support-forum teams

Affected surfaces

auth rbac

Summary

AI summary

Fixed personal token validity period time unit and added a selection box for it.

Changes in this release

Type	Severity	Summary	CVE
Security
Security	High	Adds missing permissions checks to getComment() and getReport() API endpoints. Adds missing permissions checks to getComment() and getReport() API endpoints. Source: llm_adapter@2026-07-16 Confidence: high	—
Security	Medium	Improves filtering of sensitive information in MCP config responses. Improves filtering of sensitive information in MCP config responses. Source: llm_adapter@2026-07-16 Confidence: high	—
Security	Medium	Adds admin checks to config‑related MCP tools. Adds admin checks to config‑related MCP tools. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds selection box for personal token validity period on settings page. Adds selection box for personal token validity period on settings page. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix
Bugfix	Medium	Fixes wrong time unit for personal token validity period. Fixes wrong time unit for personal token validity period. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes incorrect values displayed in Admin page config editor. Fixes incorrect values displayed in Admin page config editor. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Low	Corrects data type annotation for ScooldConfig documentation. Corrects data type annotation for ScooldConfig documentation. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

beb35cad Release v1.69.3.
d4e4e66b added personal token validity period selection box on settings page
4374d41c minor fix in config docs
18b8f711 fixed bug in personal token validity period having the wrong time unit
2b2d4c6f fixed API endpoints for getComment() and getReport() missing additional permissions checks
86e97a44 fixed sensitive info filter for config values in MCP responses
9f356fbf added admin checks in config-related MCP tools
41e0386f fixed bug with incorrect values in config editor on Admin page
21ac3bbc fixed incorrect data type in ScooldConfig doc annotation

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Scoold

Get notified when new releases ship.

About Scoold

Stack Overflow in a JAR. An enterprise-ready Q&A platform with full-text search, SAML, LDAP integration and social login support.

All releases →