How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

BookStack Security Release v26.05.3

calendar_today July 29, 2026 domain bookstack

BookStack v26.05.3 has been released. This is a security release to address a range of vulnerabilities: External Authentication Use (OIDC/SAML2/LDAP) could potentially mismatch external authentication system users to BookStack users upon login, where unique IDs are very similar (same ID text but different casing, or accented characters). The login form could be abused to use timing to gain information about if a user exists in the system.

open_in_new Read original post