Plainpad releases - releaseport

1.1.1 Security relevant 1mo

Security fixes

Privilege escalation vulnerability allowing authenticated users to grant themselves admin
Account enumeration and unauthenticated account-lockout abuse on password recovery endpoint
Unsafe ORDER BY injection on user and note list endpoints

Full changelog

Plainpad is a self hosted, open source note taking application that is very easy to setup on your server.

This is a stable release, you can use it in production environments and/or update your existing installations.

https://plainpad.org/

[1.1.1] - 2026-04-23

Fix privilege-escalation vulnerability allowing any authenticated user to grant themselves admin (#138)
Prevent account enumeration and unauthenticated account-lockout abuse on the password recovery endpoint
Whitelist sortable columns and sort direction on user and note list endpoints to prevent unsafe ORDER BY input
Add form validation rules to the user modal

1.1.0 4mo

Minor fixes and improvements.

Full changelog

Plainpad is a self hosted, open source note taking application that is very easy to setup on your server.

This is a stable release, you can use it in production environments and/or update your existing installations.

https://plainpad.org/