Version 12.1

Security updated addressing XSS vulnerabilities.

• ImageSharp has vulnerability issue #2148
• Stored XSS Vulnerability CVE-2025-57692 #2145

Version 12.0

Big thanks to @a-gubskiy & @vitali-karmanov for their contributions.

Core

• Update XSitemap #2085
• Alias routing case sensitivity #2087
• Open Graph Tags Incomplete #2089
• Add Async Method Support to ICache Interface #2095
• Update Markdig to latest version #2104
• Sanitize HTML output from Markdown field #2105
• Disable preview for PDF documents #2115
• Cross-compile for both .NET 8 and .NET 9 #2116
• Update ImageSharp to version 2.1.10 #2120

Manager

• Favicon missing from login page #2101

Version 11.1

Big thanks to @sit-harry & @cktricky for their contributions.

Core

• Update ImageSharp to 2.1.7 #2052
• Add version param to PublicUrl in FileStorage #2061

Manager

• FieldSettings not being passed to field collection region #2053
• Deserialization issue in AliasService when using distributed cache #2056

Bugfixes

• Webp images are being processed and come out 10x larger #1975
• Caching breaks ContentService #2041

Version 11.0

Big thanks to @ kimlundjohansen for his contribution.

Core

• Upgrade to .NET 8 #2023
• Remove support for Azure.Search #2028
• Remove support for SimpleCache #2026
• Remove support for Summernote #2024
• Remove support for SimpleSecurity #2025
• Make sure internal implementations isn't public #2027

Manager

• Extend max length of Post Excerpt #2039
• Extend max length of Page Excerpt #2049

Bugfixes

• Alias service causes excessive cache usage #2034

Version 10.4

Big thanks to @akanmuratcimen, @andyjwwhite, @mbaneryd and @sayganov for their contributions.

Core

• Create ArchivePageField #1655
• Route not configured if ContentTypeRouteAttribute.Title is not defined #1946
• Added net7.0 along side net6.0 support #2005

Bugfixes

• Cache not working in ContentService #1697
• Copied child pages don't show up in the pages overview #1964
• Search only works for root level pages in Page dialog #2000

Version 10.3

Big thanks to @akanmuratcimen, @andyjwwhite, @mbaneryd and @sayganov for their contributions.

Core

• Upgrade Automapper to support .NET 7 #1902
• Slug Expansion #1922
• Bump Newtonsoft.Json from 13.0.1 to 13.0.2 #1967

Bugfixes

• User is never locked out on failed login attempts #1905
• Field settings for regions are not always provided in JSON #1958

Version 10.2

Big thanks to @martijntakken, @anvarjonruziev and @NilssonMalin for their contributions.

Core

• Replace Microsoft.Azure.Search with Azure.Search.Documents#1794
• Upgrade Newtonsoft dependency #1901
• Update so missing pages throws 404 instead of 500 #1916
• Upgrade ImageSharp to support WebP #1935

Bugfixes

• Page move sort order. Incorrect behavior in page move sort order #1876
• Incorrect hostname is shown in page/post settings #1878

Version 10.1

Big thanks to @samokisha for Ukrainian translations for the manager interface.

Core

• Read Language.Culture in ApplicationService.Initialize #1845

Manager

• Timeout when uploading large media files #1704
• Ukrainian translation #1850

Bugfixes

• Media delete confirmation not working #1848

Version 10.0.4

There was an issue with 10.0.4 causing endpoints for the application to not be registered properly when using classic application startup with Startup.cs. For this reason version 10.0.4 has been released.

Bugfixes

• Endpoints not registered in classic application startup #1844

Version 10.0.3

There's an issue with 10.0.3 causing endpoints for the application to not be registered properly when using classic application startup with Startup.cs. For this reason version 10.0.4 replaces this version.

Core

• .UsePiranha() middleware ruins route search #1816
• Add extension methods for new .NET 6 application startup #1824

Manager

• XsrfCookie not set as essential #1829
• Add asp-append-version to script/link tags #1840

Bugfixes

• PostgreSql InvalidCastException with DateTime #1762