jotty
Productivity & WikisA self‑hosted, file‑based app for personal checklists and notes with optional PGP encryption
Features
- File‑based storage (Markdown & JSON) – no database required
- Checklists with drag‑and‑drop, progress bars, categories and Kanban boards
- Rich‑text WYSIWYG note editor with full Markdown support and syntax highlighting
- User management, sharing links, 14 built‑in themes plus custom theme/emoji options
Recent releases
View all 19 releases →
Upgrade now
1.25.0
Breaking risk
Dependencies
Drag‑and‑drop engine + Start Date + PATCH endpoints
1.23.0
Mixed
Notable features
- Runtime patching system for wrapping third-party modules at runtime
- Notes encrypted by default on creation with cached password
- Global time/date format with per-user override
Full changelog
Changelog
bugfixes
- Potentially fix IOS scroll issue #452
- Add tzdata package to Dockerfile for proper
TZsupport - Thank you @sethgregory - Nested checklist breaking to two lines before they need to #476
- Style up time input for the reminder time
- Wrong password length check on PGP encryption #467
- Username with spaces break image urls #494
- Fix table of content not working in edit mode #496
- FINALLY fix the damn body size limit issue #422
features
- Allow user to change checklist behaviour to edit on click rather than check on click #477
- Encrypt note by default on create so they never hit the server decrypted #468
- Store the encryption password in state (ref) so you are not prompted when editing/saving the encrypted note you are already viewing #469
- Added a whole patching system for issues like #422 and #488 . This allow users to create patches that run on runtime, effectively being able to wrap code around any node modules. It's particularly useful for issues that haven't been fixed by third parties and that are actually out of my control. Patches can be custom made by you or built in by me, please read the documentation in the howto section for more info ❤️
- Add support for FreeBSD #488 - Thank you @h-2
- Added global setting for time/date format that can be overridden on a per user basis #403
1.22.0
Breaking risk
Security fixes
- Jotty: High-severity vulnerability patched (CVE pending)
- simple-git: RCE via blockUnsafeOperationsPlugin bypass (Critical)
- vite: Arbitrary file read, path traversal, server.fs.deny bypass (High)
Notable features
- Kanban system with priorities, assignees, due dates, and reminders
- Calendar view for tasks with due dates
- LDAP authentication support
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
