marcpope/cortendesk v1.21.1

CortenDesk 1.21.1

on GitHub

Security

• Symfony 8.1.11. Fixes CVE-2026-118514 (HEAD requests bypassing method-limited access rules), CVE-2026-118516 (host placeholders matching the start of the path in compiled URL matchers), and four advisories without a CVE, about forwarded headers, trusted proxy ranges and generated URLs. Updating is recommended.

Notes

• No other changes from 1.21.0. No migrations. Bundles CortenDesk Server 1.5.0, as before.

docker pull marcpope/cortendesk:1.21.1
docker pull ghcr.io/marcpope/cortendesk:1.21.1

Feeling generous? Sponsor this project: https://github.com/sponsors/marcpope/