2.17.2

FoundationVision/VAR2.17.2Aug 27, 2026by github-actions[bot]

Upgrading?

AI Summary

A bug fix release focusing on SVG export rendering issues, typography token management, and a critical security vulnerability fix in the SVG exporter.

Key Highlights

  • Fixes command injection vulnerability in SVG exporter (GHSA-4f36-m4hj-cv86)
  • Fixes linear gradients in SVG text exports being emitted as radial gradients
  • Fixes typography token becoming detached when editing text content

Full Release Notes


### :bug: Bugs fixed

- Fix linear gradients in SVG text exports being emitted as radial gradients [#5972](https://github.com/penpot/penpot/issues/5972) (PR: [#11272](https://github.com/penpot/penpot/pull/11272))
- Fix typography token becoming detached when editing text content [#11362](https://github.com/penpot/penpot/issues/11362) (PR: [#11366](https://github.com/penpot/penpot/pull/11366))
- Fix command injection in SVG exporter via legacy fill-color (https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86)

Related Repositories