Skip to content

wekan

v9.56 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

docker javascript kanban meteor real-time sandstorm
+2 more
snapcraft wekan

Affected surfaces

deps

Summary

AI summary

Minor fixes and improvements.

Full changelog

v9.56 2026-06-18 WeKan ® release

This release adds the following updates:

  • Updated dependencies.
    Merged Dependabot update: dompurify 3.4.9 → 3.4.11
    (#6395), a patch update of the
    HTML sanitizer used for XSS protection.
    Thanks to xet7.

Thanks to above GitHub users for their contributions and translators for their translations.

Security Fixes

  • DOMPurify updated to 3.4.11 — patch includes XSS protection improvements (no CVE cited).
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track wekan

Get notified when new releases ship.

Sign up free

About wekan

The Open Source kanban, built with Meteor. GitHub issues/PRs are only for FLOSS Developers, not for support, support is at https://wekan.fi/commercial-support/ . New English strings for new features at imports/i18n/data/en.i18n.json . Non-English translations at https://app.transifex.com/wekan/wekan only.

All releases →

Related context

Beta — feedback welcome: [email protected]