ONLYOFFICE Docs 8.1.3 → 10.0.0

18 releases · 0 breaking changes · 2 security fixes · 2 advisories fixed

2security0breaking0deprecated0feature0fix

Is 8.1.3 affected?

Vulnerabilities fixed by this upgrade

6.4 CVE-2025-68935 ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer.
6.4 CVE-2025-68936 ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer.

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2025-68935: ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer. in 9.2.1
security Fixes CVE-2025-68936: ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer. in 9.2.1

Every release in between

10.0.0 Oct 12, 2026 Release notes ↗

otherSee changes at CHANGELOG.md

9.4.0 May 19, 2026 Release notes ↗

otherSee changes at CHANGELOG.md

9.3.1 Mar 3, 2026 Release notes ↗

otherSee changes at CHANGELOG.md

9.3.0 Feb 24, 2026 Release notes ↗

otherSee changes at CHANGELOG.md

9.2.1 Dec 17, 2025 Release notes ↗

securityFixes CVE-2025-68935: ONLYOFFICE Docs before 9.2.1 allows XSS via the Font field for the Multilevel list settings window. This is related to DocumentServer.

securityFixes CVE-2025-68936: ONLYOFFICE Docs before 9.2.1 allows XSS via the Color theme name. This is related to DocumentServer.

otherSee changes at CHANGELOG.md

9.2.0 Dec 1, 2025 Release notes ↗

otherSee changes at CHANGELOG.md

9.1.0 Oct 14, 2025 Release notes ↗

otherSee changes at CHANGELOG.md

9.0.4 Aug 5, 2025 Release notes ↗

otherSee changes at CHANGELOG.md

9.0.3 Jul 8, 2025 Release notes ↗

otherSee changes at CHANGELOG.md

9.0.2 Jun 26, 2025 Release notes ↗

otherSee changes at CHANGELOG.md