jotty
Productivity & WikisLightweight but powerful alternative for managing your personal, file based, notes and checklists.
Features
- File‑based checklists with drag‑and‑drop, progress bars and Kanban boards
- Rich text WYSIWYG notes editor with full Markdown support and syntax highlighting
- User management, sharing links, PGP encryption and a REST API
Recent releases
View all 17 releases →
1.23.0
Mixed
Notable features
- Runtime patching system for wrapping third-party modules at runtime
- Notes encrypted by default on creation with cached password
- Global time/date format with per-user override
Full changelog
Changelog
bugfixes
- Potentially fix IOS scroll issue #452
- Add tzdata package to Dockerfile for proper
TZsupport - Thank you @sethgregory - Nested checklist breaking to two lines before they need to #476
- Style up time input for the reminder time
- Wrong password length check on PGP encryption #467
- Username with spaces break image urls #494
- Fix table of content not working in edit mode #496
- FINALLY fix the damn body size limit issue #422
features
- Allow user to change checklist behaviour to edit on click rather than check on click #477
- Encrypt note by default on create so they never hit the server decrypted #468
- Store the encryption password in state (ref) so you are not prompted when editing/saving the encrypted note you are already viewing #469
- Added a whole patching system for issues like #422 and #488 . This allow users to create patches that run on runtime, effectively being able to wrap code around any node modules. It's particularly useful for issues that haven't been fixed by third parties and that are actually out of my control. Patches can be custom made by you or built in by me, please read the documentation in the howto section for more info ❤️
- Add support for FreeBSD #488 - Thank you @h-2
- Added global setting for time/date format that can be overridden on a per user basis #403
1.22.0
Breaking risk
Security fixes
- Jotty: High-severity vulnerability patched (CVE pending)
- simple-git: RCE via blockUnsafeOperationsPlugin bypass (Critical)
- vite: Arbitrary file read, path traversal, server.fs.deny bypass (High)
Notable features
- Kanban system with priorities, assignees, due dates, and reminders
- Calendar view for tasks with due dates
- LDAP authentication support
1.21.1
Bug fix
Fixed websocket looping connection for unauthenticated users and resolved asset blocking causing redirect loops.
1.21.0
New feature
Notable features
- Significant performance improvements for 5k+ notes through caching
- Tags support for checklists with sidebar filtering
- Drag-and-drop consistency fixes
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.