Contents / InvisibleBleed

CVE	Vulnerability name	Date	Responsible Security Disclosure by	Vulnerabilities
-	InvisibleBleed	2023-04-23 03.35 EET	Someone at chat Sent report and disappeared.	Security: HTML comments not visible Affected Wekan v6.85 and earlier Fixed at Wekan v6.86 2023-04-24

Timeline	Details
2023-04-23 03.35 EET	At chat, report received from someone, that then disappeared.
2023-04-24 23:30 EET	Security: HTML comments not visible Affected Wekan v6.85 and earlier Fixed at Wekan v6.86 2023-04-24

Follow-up fixes (2026-10-02)

The fix replaced only the first hidden HTML comment in rendered card text, so a second one stayed hidden. Every occurrence is now made visible. Fix.