> ## Documentation Index
> Fetch the complete documentation index at: https://collabase.ch/docs/llms.txt
> Use this file to discover all available pages before exploring further.

> ## Agent Instructions
> Collabase documentation. Interface labels are quoted in English, as they appear in the product.
> Features marked Enterprise need the Collabase Enterprise Edition licence.

# Collabase 1.0.1 release notes

> What is new, improved and changed in Collabase 1.0.1, released in November 2026.

Collabase 1.0.1 closes several security advisories in components of the platform. We recommend
this update for every instance.

**Supported until:** October 2027. Collabase 1 gets fixes and security updates for one year after its release, in its newest minor version.

## Security

| Vulnerability / CVE | Severity | Affected component / Description |
| - | - | - |
| CVE-2026-119203, CVE-2026-119204, CVE-2026-119205 | High | Document processing: a specially crafted PDF could keep the text extraction of PDF files in an endless loop or use a very large amount of memory. Fixed by updating the PDF component. |
| CVE-2026-116689 | High | Translation connection (DeepL): updated a component that handles web requests, which could pass on a custom credential header to another site after a redirect. Updated as a precaution. |
| CVE-2026-45249 | Medium | Charts: fixed a cross-site scripting vulnerability in chart tooltips of the charting component. |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.