2.17.2

HKUDS/Vibe-Trading2.17.2Aug 27, 2026by github-actions[bot]

AI Summary

This release focuses on stability and security, addressing critical bugs in SVG exports, typography tokens, and fixing a command injection vulnerability.

Key Highlights

Fix linear gradients in SVG text exports being emitted as radial gradients
Fix typography token becoming detached when editing text content
Fix command injection in SVG exporter via legacy fill-color

Full Release Notes


### :bug: Bugs fixed

- Fix linear gradients in SVG text exports being emitted as radial gradients [#5972](https://github.com/penpot/penpot/issues/5972) (PR: [#11272](https://github.com/penpot/penpot/pull/11272))
- Fix typography token becoming detached when editing text content [#11362](https://github.com/penpot/penpot/issues/11362) (PR: [#11366](https://github.com/penpot/penpot/pull/11366))
- Fix command injection in SVG exporter via legacy fill-color (https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86)