CryptPad 2026.2.0 Security Update: Fixes 2FA Deletion and Invalid Credential Handling Issues

CryptPad 2026.2.0 Version Update Summary Vulnerability Overview This update primarily addresses several security-related issues, including: Fixed the error message issue when invalid credentials are used Fixed the issue of deleting 2FA data when archiving an account Fixed the padding issue with profile action buttons Fixed the name overflow issue on the contact page Fixed the profile description editor now displaying saved values without requiring focus Impact Scope Affects all users utilizing CryptPad Particularly impacts functionalities related to account management, profile editing, and contact information management Remediation Fixed the error message issue when invalid credentials are used (#2163) Fixed the issue of deleting 2FA data when archiving an account (#2177) Fixed the padding issue with profile action buttons (#2081) Fixed the name overflow issue on the contact page (#2084) Fixed the profile description editor now displaying saved values without requiring focus (#2100) Additional Improvements Upgraded Office application to OnlyOffice v9.2.0.119 Added OnlyOffice history browsing functionality Updated drive tree UI Integrated API improvements Allowed client downloads Enabled users to disable the old password error mode Added support for required questions in forms Improved support and moderation UI Enabled Dutch language Dependency Updates body-parser from ^1.20.2 to ^1.20.4 express from ~4.21.2 to ~4.22.1 jsonwebtoken from ^9.0.0 to ^9.0.3 Deployment and Development Do not deploy Draw.io JAR files Switched to docker alpine image Updated triggers for end-to-end test suite Added IntelliJ directory to git ignore Upgrade Instructions If upgrading from a version prior to 2025.9.0, please read all intermediate version upgrade instructions to avoid configuration issues. Upgrade steps: 1. Stop the server 2. Obtain the latest code 3. Restart the server 4. Check the instance's check page to ensure all tests pass

Goal Reached Thanks to every supporter — we hit 100%!

CryptPad 2026.2.0 Security Update: Fixes 2FA Deletion and Invalid Credential Handling Issues

More from this source