LinkAce

Productivity & Wikis

A self‑hosted bookmark manager for organizing, archiving, and sharing links.

PHP Latest v2.6.0 · 23d ago Security brief →

Features

View all 13 releases →

Review required

v2.6.0 New feature 23d

Auth RBAC Breaking upgrade +1 more

Pluggable search + language additions

Open

Review required

v2.5.9 Security relevant 1mo

Auth

Private link view prevention

Open

Review required

v2.5.7 Security relevant 2mo

Auth Dependencies

Blocks javascript URL injection

Open

v2.5.6 Security relevant 2mo

Security fixes

Prohibit users from editing other users' entities – fixes unauthorized modification vulnerability
Properly escape user names in activity logs
Disallow line breaks in database configuration during setup

Notable features

Full changelog

Security fixes:
- Users are now prohibited from editing other users entities.
- User names are now properly escaped in activity logs.
- Line breaks are now disallowed in database configurations during the setup process.
LinkAce now provides a TRUSTED_HOSTS .env configuration variable that can be used to change which hostnames are allowed for accessing your instance.
There is now a debug command (php artisan debug) which shows essential configuration parameters.
Dependencies were updated.

Full Changelog: https://github.com/Kovah/LinkAce/compare/v2.5.5...v2.5.6

v2.5.5 Mixed 3mo

Notable features

Broken links automatically re-checked after 2 weeks with configurable interval via BROKEN_LINK_RECHECK_INTERVAL_WEEKS
Broken status resets when a link's URL is changed
Build system migrated from Laravel Mix to Vite

Full changelog

Links are now re-checked after 2 weeks if they are broken. The number of weeks can be configured using the BROKEN_LINK_RECHECK_INTERVAL_WEEKS .env setting. (#1093)
The broken status of links is now rest if the URL is changed. (#1092)
Migration from Laravel Mix to Vite for CSS and JS.
Update of dependencies

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.