2.17.2

interviewstreet/hiring-agent2.17.2Aug 27, 2026by github-actions[bot]

Upgrading?

AI Summary

This release addresses critical security vulnerabilities and bug fixes related to SVG exports, typography handling, and command injection risks.

Key Highlights

  • Fix command injection vulnerability in SVG exporter via legacy fill-color
  • Correct linear gradients in SVG text exports
  • Fix typography token becoming detached when editing text content

Full Release Notes


### :bug: Bugs fixed

- Fix linear gradients in SVG text exports being emitted as radial gradients [#5972](https://github.com/penpot/penpot/issues/5972) (PR: [#11272](https://github.com/penpot/penpot/pull/11272))
- Fix typography token becoming detached when editing text content [#11362](https://github.com/penpot/penpot/issues/11362) (PR: [#11366](https://github.com/penpot/penpot/pull/11366))
- Fix command injection in SVG exporter via legacy fill-color (https://github.com/penpot/penpot/security/advisories/GHSA-4f36-m4hj-cv86)

Related Repositories