From cdbd5a58db321cf34f79d6ffe3cd177b2f2e10f1 Mon Sep 17 00:00:00 2001 From: ildyria Date: Mon, 23 Mar 2026 23:11:23 +0100 Subject: [PATCH 1/2] Version 7.5.3 --- docs/releases.md | 18 ++++++++++++++++++ src/components/widgets/Announcement.astro | 4 ++-- src/pages/roadmap.astro | 5 +++-- 3 files changed, 23 insertions(+), 4 deletions(-) diff --git a/docs/releases.md b/docs/releases.md index 1aade95..476384c 100644 --- a/docs/releases.md +++ b/docs/releases.md @@ -30,6 +30,24 @@ ## Version 7 +### v7.5.3 + +Released on Mar 23rd, 2026 + +#### Fix XSS in RSS feed + +Another day, another patch. A bit depressing... but so is the life of a maintainer. This patch fixes a potential XSS vulnerability in the RSS feed. The issue was that the description of the photos were not properly escaped, allowing for potential XSS attacks if they contained malicious code. + +* `fix` #4218 : Fix XSS in /feed by @ildyria. +* `new` #4217 : Added and improved German translations by @hyazinthh. + +Once again, thanks to @morimori-dev for reporting the XSS issue. + +#### New Contributors + +@hyazinthh made their first contribution in https://github.com/LycheeOrg/Lychee/pull/4217 + + ### v7.5.2 Released on Mar 22nd, 2026 diff --git a/src/components/widgets/Announcement.astro b/src/components/widgets/Announcement.astro index 8e152f4..3f05b1a 100644 --- a/src/components/widgets/Announcement.astro +++ b/src/components/widgets/Announcement.astro @@ -10,8 +10,8 @@ >NEW Lychee 7.5.2 is now available! »Lychee 7.5.3 is now available! »