Poznote 6.125.0
Caution
Security release: please update as soon as possible.
The Docker image moves to PHP 8.4.27, which fixes two critical PHP vulnerabilities.
🐛 Fixed
- Critical PHP vulnerabilities: PHP 8.4.26, shipped in Poznote 6.124.0 and earlier, is affected by CVE-2026-109618 and CVE-2026-109619, which allow remote code execution without signing in. The image now runs PHP 8.4.27, the patched version.
- PHP upload progress tracking is now turned off. Poznote never used it, and it was one of the ways to reach CVE-2026-109619.
❤️ Enjoying Poznote?
Thank you to everyone whose donations have allowed Poznote to keep growing and become what it is today. If you would like to support the project, it is this way: Ko-fi.
Poznote Discord community -> https://discord.gg/fuEV6uqf4N
Poznote is also available in Caliber Node and PikaPods.
If you're curious about my other projects, you can find them at timpoz.com. 😊