CIRCLE WITH A DOT

@dusoft Logins/registration via social systems did not have the same vulnerability. This only affected registrations via in-built email/password register form, which can be used when the 'standard' primary authentication type is used, and when the registration option is enabled in the BookStack settings.

BookStack v25.12.9 has been released.This is a security release to address a vulnerability where style code in page content could be used to manipulate the page beyond the expected content area in some revision views, opening up risk of potential phishing and/or tracking by bad page editors.We advise that you update your instance if you allow untrusted users to create or edit pages.https://www.bookstackapp.com/blog/bookstack-release-v25-12-9/