fix

Author: ildyria

docs/releases.md

@@ -36,7 +36,7 @@ Released on Mar 23rd, 2026
 
 #### Fix XSS in RSS feed
 
-Another day, another patch. A bit depressing... but so is the life of a maintainer. This patch fixes a potential XSS vulnerability in the RSS feed. The issue was that the description of the photos were not properly escaped, allowing for potential XSS attacks if they contained malicious code.
+Another day, another patch. A bit depressing... but so is the life of a maintainer. This patch fixes a potential XSS vulnerability in the RSS feed. The issue was that the description of the photos was not properly escaped, allowing for potential XSS attacks if they contained malicious code.
 
 * `fix` #4218 : Fix XSS in /feed by @ildyria.
 * `new` #4217 : Added and improved German translations by @hyazinthh.

src/pages/roadmap.astro

@@ -8,9 +8,9 @@ const metadata = {
 
 // Release data extracted from releases.md
 const releases = [
-  { version: 'v7.5.3', date: 'Mar 23, 2026', title: 'Hotfix', type: 'bugfix', highlights: ['Fix XSS in RSS feed'] },
+  { version: 'v7.5.3', date: 'Mar 23, 2026', title: 'Hotfix', type: 'security', highlights: ['Fix XSS in RSS feed'] },
   { version: 'v7.5.2', date: 'Mar 22, 2026', title: 'Camera support & hotfix', type: 'minor', highlights: ['Upload from camera support from Frontend', 'Fix SSRF on name resolution to reserved ip space'] },
-  { version: 'v7.5.1', date: 'Mar 21, 2026', title: 'Hotfix', type: 'bugfix', highlights: ['Fix SSRF on localhost aliases', 'Support PHP wihout LDAP extension'] },
+  { version: 'v7.5.1', date: 'Mar 21, 2026', title: 'Hotfix', type: 'security', highlights: ['Fix SSRF on localhost aliases', 'Support PHP wihout LDAP extension'] },
   { version: 'v7.5.0', date: 'Mar 16, 2026', title: 'Search revamped', type: 'major', highlights: ['New search UI & UX', 'Tag filters in albums'] },
   { version: 'v7.4.2', date: 'Mar 12, 2026', title: 'Fixes', type: 'bugfix', highlights: ['Fixes to the CSP policy'] },
   { version: 'v7.4.1', date: 'Mar 8, 2026', title: 'Fixes and minor improvements', type: 'bugfix', highlights: ['Fixed potential crash related to missing configurations', 'Added error message for missing ldap extension', 'Allow passing individual file paths to lychee:sync command'] },