Scoold

Productivity & Wikis

An open‑source Q&A/knowledge‑sharing platform for teams, modeled after Stack Overflow

Track releases GitHub Website

Java Latest 1.68.2 · 7d ago Security brief →

Features

Full‑featured Q&A with reputation and voting system
Database‑agnostic cloud deployment via the Para backend
Rich integrations: Slack, Mattermost, Teams, Zapier, SAML, SCIM

Recent releases

View all 8 releases →

No immediate action

1.68.2 Bugfix 7d

Answers posting fix

Open

No immediate action

1.68.0 Breaking risk 14d

FontAwesome removal

Open

1.67.1 Bug fix 1mo

Notable features

Added async methods in ParaClient for slow operations
Added Catalan and Albanian translations
Added support for service tokens used by Scoold Cloud for health checks

Full changelog

76b968fb Release v1.67.1.
1cd19c68 fixed broken default descending sort order
c4710619 updated import code
c69d7cc8 updated dependencies
bb0daaf2 updated reachability-metadata.json and Para Client
356c8290 added ParaClient's async methods where we have slow operations
cad9631a updated dependencies
692db616 updated logback.xml
0fe3495f fixed issues with the import from SO feature
5201046f updated reachability-metadata.json
5ad24f22 added Catalan and Albanian translations
b40f1bc9 added support for service tokens used by Scoold Cloud for health checks
ecc0c600 updated reachability-metadata.json

View release on GitHub

1.67.0 Mixed 1mo

Security fixes

GHSA-7qfx-c234-xg4g — added security checks in ApiController for personal access token handling

Notable features

Personal access tokens for Scoold API and MCP server
MCP server implementation based on Spring AI

Full changelog

ac0c5860 added MCP server implementation based on Spring AI
346bb030 added new feature - personal access tokens for the Scoold API and MCP server

:warning: This release contains a fix for GHSA-7qfx-c234-xg4g

b78170e7 added security checks in ApiController for better handling of personal access tokens
5261a6c3 updated JOSE lib
95d30058 updated reachability-metadata.json
b0f94a4d added personal token validation methods
8a3ebfaf added personal token expiration configuration property
5880c617 minor fix for wrong default space name in Post class
c35f4f45 minor fix for null content body in comments and posts
31d55eda minor fix for invalid addition to an empty list in ApiController
b83428aa minor fix for occasionally incorrect appid value shown in API responses
96995074 fixed bug where reports count badge is not updated instantly when reports are deleted
4883c5d1 added optional override entity map in ApiController creation methods
9426a5e3 added explicit Pager request parameters in ApiController

View release on GitHub

1.66.2 Security relevant 1mo

Security fixes

GHSA-768r-cv9p-wrcm — fixed unsafe handling of postId in QuestionsController.post()

Full changelog

:warning: This release contains fix for https://github.com/Erudika/scoold/security/advisories/GHSA-768r-cv9p-wrcm

a15fa1b6 Release v1.66.2.
e091c932 refactoring - declared explicit request parameters in ApiController methods
e548086b fixed unsafe handling of postId when creating new questions in QuestionsController.post()
3bcd7406 added missing filter on questions page for listing questions with accepted answer
100827ee minor change in CSP header

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.