CTFd 3.8.0 has been released with new analytics and quality-of-life improvements for both admins and participants. Challenge solutions, Challenge Ratings, the new Challenge logic field and other improvements are available in CTFd 3.8.0. Read More: blog.ctfd.io/ctfd-3-8-0/

CTFd 3.8.9 has been released with updates to the bundled pip and certifi libraries to remove the compromised eMudhra root certificates. We recommend all CTFd users update their instance to v3.8.9. blog.ctfd.io/ctfd-3-8-9/

CTFd 3.8.8 is now available with fixes for four security vulnerabilities, including a critical vulnerability affecting password reset. We strongly recommend all users upgrade to v3.8.8. blog.ctfd.io/ctfd-3-8-8/

CTFd 3.8.7 has been released with fixes for two vulnerabilities. An unintended API leak of private Custom Fields and a issue where challenge max attempts could sometimes be bypassed. We recommend all CTFd users update their instance to v3.8.7. blog.ctfd.io/ctfd-3-8-7/

CTFd 3.8.6 has been released with a security fix for a vulnerability where a malicious admin could disclose internal SMTP credentials. blog.ctfd.io/ctfd-3-8-6/

CTFd 3.8.5 has been released with a security fix for an open redirect that affected certain browsers. blog.ctfd.io/ctfd-3-8-5/

CTFd 3.8.4 has been released with fixes for two vulnerabilities. The first allows an attacker to cause malicious links to be served to other users possibly resulting in JS execution. The second is an open redirect for users via malicious crafted URLs. blog.ctfd.io/ctfd-3-8-4/

CTFd 3.8.2 has been released with a security fix for a vulnerability where a malicious admin user could import a crafted zip file to write files arbitrarily depending on the configuration of CTFd. blog.ctfd.io/ctfd-3-8-2/

CTFd 3.7.6 has been released with security configuration improvement. The TRUSTED_HOSTS config setting has been added to config.ini to restrict CTFd to trusted hostnames. bit.ly/4gSXQNd

Yesterday we announced new pricing including a change to the edu discount. After discussion with some affected customers, we will be keeping the edu discount at 80% and the non-profit discount at 50% as before. We apologize for any confusion.

Since our current pricing was established over 7 years ago there have been many changes both in the Hosted CTFd feature set and worldwide economic forces. Our underlying costs have increased across the board and we are updating our pricing. bit.ly/3WjwSaa

CTFd 3.7.5 has been released with security fixes for brackets and security improvements to the account confirmation and reset password emails. bit.ly/4gSbhgE

CTFd 3.7.4 has been released with a security fix for a vulnerability where an attacker could perform a Denial of Service against a CTFd instance. Read More at bit.ly/4eIFvSL

CTFd 3.7.3 has been released with a security fix for a vulnerability where an attacker could determine the names of accounts that had solved a challenge even though CTFd was configured to hide account information. bit.ly/3YvAgRc

CTFd 3.7.2 has been released with a security fix for a vulnerability where an attacker could extract flags from CTFd provided that an admin interacted with a malicious page. More details available on our blog bit.ly/3VwAiVv

CTFd 3.7.0 is available now with scoreboard brackets, social sharing links, improvements to the file upload API and the introduction of Vite. Read more at bit.ly/437fmIk

CTFd v3.6.0 has been released with support for Translations! Initially we are supporting German, Polish, Spanish, and Chinese. This release has been long in the making and we're very relieved to be releasing it out to you! Read more at buff.ly/3QMJzYU

Very excited to be working @osirislab to host a @BSidesNYC CTF in April!

Introducing Tourist! We're open sourcing an internal project that makes it easier to run browser-based CTF challenges. Read more on our blog at buff.ly/3wtdkT6.

CTFd v3.5.0 has been released with Next Challenge, Hint Requirements, Importer Improvements, and a beta release of the next iteration of the default CTFd theme! 50% reduction in bundle size! Read more at buff.ly/3PbtU2b