Just before the year ends we have a little security patch release.
We recommended to update your instance if untrusted users have ZIP import permissions, or if untrusted users can perform searches.
More details on our blog here:
https://www.bookstackapp.com/blog/bookstack-release-v25-12-1/