DSpace 9.1 is now available!
DSpace Community
We are pleased to announce the release of DSpace 9.1! This release provides security fixes and bug fixes to the 9.x platform. No new features are provided. As such, this release should be an easier upgrade for sites already running 9.x.
Security Fixes
Fix for CVE-2025-53621 (moderate severity). XML External Entity (XXE) injection possible in import via Simple Archive Format (SAF) or import from external sources. See security advisory or mailing list “security notice” for details.
Fix for CVE-2025-53622 (moderate severity). Path traversal vulnerability in Simple Archive Format (SAF) package import via “contents” file. See security advisory or mailing list “security notice” for details.
Major Bug fixes / improvements include:
Submission / Workflow enhancements and fixes
Fixed bug where importing a multi-paragraph abstract from PubMed would result in it being split into many abstracts in DSpace. (Donated by Atmire)
ArXiv importer began failing because its configuration didn't use the HTTPS URL. (Donated by Atmire)
Alphabetized all external sources in the import dropdown by source name.
Administrative enhancements and fixes
Fixed bug where community/collection subscription emails were not working as an error occurred when running "./subscription-send" (Donated by Alan Orth)
Deleting a Group now requires confirmation (via a confirmation popup). (Donated by Jukka Lipka)
Fixed several CSS / style issues found since upgrading to Bootstrap 5. (Donated by Atmire)
Fixed bug where Geospatial Map javascript code was loaded even when it was not used. (Donated by Atmire)
For a full list of changes and contributors in 9.1, see our Release Notes
New and improved Language support
German (Deutsch) language updates donated by Sascha Szot
Gujarati (ગુજરાતી) language translations donated by DSquare Technologies
Hungarian (Magyar) language updates donated by Zoltán Kanász-Nagy
Marathi (मराठी) language translations donated by DSquare Technologies
Portuguese (Português) language updates donated by Ricardo Saraiva
Russian (Русский) language translations donated by Arvo Consultores
A total of 19 individuals contributed to 9.1. For a full list of changes and contributors in 9.1, see our Release Notes.
Would you like to contribute to a future DSpace release?
DSpace is built and supported by community volunteers. We have no centralized development team. Therefore, we welcome contributions from anyone! Contributions may take the form of:
Contributing money to our DSpace Development Fund - All funds go directly towards development in the next release(s), and you will be acknowledged on our DSpace Development Fund page.
Contributing code - As a volunteer developer you can determine which issue ticket you’d like to work on. Join our weekly developer meetings or get in touch with Tim Donohue if you have any questions.
Our next major release will be DSpace 10.0 (due in 2026). But, we also continue to support our last three major releases (currently 7.6.x, 8.x and 9.x). If you’d like more information on ongoing development, please consider joining our weekly developer meetings, or follow along by reading the public notes of past meetings.