Skip to content
release
BETA
Releases
Tools
Vendors
Trending
$refs.securityHub.focus())"
:aria-expanded="open"
aria-haspopup="menu"
class="inline-flex items-center gap-1 px-3 py-1.5 rounded text-[13px] font-medium transition-colors text-[var(--text-secondary)] dark:text-[var(--text-muted)] hover:text-[var(--text-primary)] dark:hover:text-[var(--text-primary)] hover:bg-[var(--surface-hover)] dark:hover:bg-[var(--surface-elevated)]"
>
Security
Tools
/
hortusfox-web
HO
hortusfox-web
Productivity & Wikis
A free open‑source self‑hosted collaborative plant management system for tracking, caring for, and journaling plants
PHP
·
Latest v5.8 · 2mo ago
Security brief →
Features
Plant management with custom locations
Task, inventory, calendar, search, history, weather, group chat, reminders and backups
Theme customization, admin dashboard, REST API, QR codes and plant identification
v5.8
Breaking risk
·
2mo
Security fixes
Prevent execution of arbitrary script files in the /public directory — blocks potential remote code execution via uploaded scripts
Notable features
Ecosia image search for returned plant names using the plant recognition feature Improved hyperlink generation for Ecosia image search
Full changelog
Version 5.8 of HortusFox
Changelog
Added tech stack section in README to give credits to used packages (#455)
Added markdown for plant details notes (#497)
Fixed that custom plant attributes weren't taken into account when cloning plants (#503)
Fixed that an initially generated cronjob password contained invalid characters (#510)
Fixed that exporting a backup failed in case any of the locations weren't assigned a preview image (#513)
Added a list of console commands to project README (#517)
Changed allowed request methods for cronjobs (#518)
Removed associations with any big tech corporations (#519)
Ecosia image search for returned plant names using the plant recognition feature (#520)
Improve generating hyperlinks for Ecosia image search (#523)
Prevent execution of arbitrary script files in the /public directory (#524)
Increment version number across various files (#525)
v5.7
Feature
·
7mo
Notable features
Local theme management AquaShell config setup command
v5.6
Bug fix
·
7mo
Fixed distorted location card display, implemented QR code printing workaround across all browsers, prevented admin account creation if already created during Docker setup, and updated French translations.
v5.5
Bug fix
·
7mo
Notable features
List type view for history section
v5.4
Bugfix
·
8mo
Version 5.4 of HortusFox
This is a hotfix which resolves issue #467
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Releases per month
Releases per month, last 12 months.
Cadence
0.1 / wk
Last release
85d
Tracked
8
Security score
5.2/10
OpenSSF
—
Open CVEs
0
SBOM
SECURITY.md
Active maintainer
Community
GitHub stars
1,576
Forks
93
Contributors 90d
1
Open issues
17
Stars/wk velocity
0.0
HN peak
58
About
Languages
PHP
·
Hack
·
JavaScript
View on GitHub
Homepage
Documentation
{ copied = true; setTimeout(() => copied = false, 2000) })"
class="flex items-center gap-1.5 text-[12px] text-[var(--text-muted)] dark:text-[var(--text-muted)] hover:text-[var(--accent)] dark:hover:text-[var(--accent)] transition-colors"
>
About
Languages
PHP
·
Hack
·
JavaScript
View on GitHub
Homepage
Documentation
{ copied = true; setTimeout(() => copied = false, 2000) })"
class="flex items-center gap-1.5 text-[12px] text-[var(--text-muted)] dark:text-[var(--text-muted)] hover:text-[var(--accent)] dark:hover:text-[var(--accent)] transition-colors"
>
© 2026 releaseport. All rights reserved.
Feed
Tools
Feeds
Security
Brief
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for " "
⌘K to open
↑↓ navigate
⏎ open