I, Librarian 4.8 released

Published on Thu, 30 Mar 2017 12:34:16 -0400

This version of I, Librarian is a bug fix release.

Bug fixes

  • a bug causing a vulnerability in importmetadata.php was fixed
  • a bug causing a server-side request forgery vulnerability was fixed
  • a bug where year was not exported in RIS was fixed
  • a bug where month was not exported in Bibtex was fixed
  • a bug where journal was incorrectly exported in Bibtex was fixed
  • a bug where external links disappeared on PHP 7.1 was fixed

Several vulnerabilities that were fixed in versions 4.7 and 4.8 were reported by an external security lab. We wish to thank Wan Ikram, Fikri Fadzil and Jasveer Singh from SEC Consult Vulnerability Lab for responsibly reporting the identified issues and working with us as we addressed them.


If you are subscribed for our hosted service, your library already runs the newest version.

Subscribe for hosted version now!

If you self-host I, Librarian, it is easy to move your existing library to our servers. Just subscribe and let our support know you want to upload your library. We will be happy to help you!


If you have I, Librarian installed, you can buy the official support and get priority treatment for your problems and questions.

Buy support now!


Free version can be downloaded here.

comments powered by Disqus