Publish release notes for version 2.3.1

Author: fguillot

content/releases/2.3.1.md

@@ -0,0 +1,62 @@
+---
+title: Miniflux 2.3.1
+date: 2026-05-29
+type: release
+layout: release
+url: /releases/2.3.1.html
+attachments:
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-darwin-amd64
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-darwin-amd64.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-darwin-arm64
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-darwin-arm64.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-freebsd-amd64
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-freebsd-amd64.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-amd64
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-amd64.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-arm64
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-arm64.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-armv5
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-armv5.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-armv6
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-armv6.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-armv7
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-linux-armv7.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-openbsd-amd64
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-openbsd-amd64.sha256
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux-2.3.1-1.0.x86_64.rpm
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux_2.3.1_amd64.deb
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux_2.3.1_arm64.deb
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux_2.3.1_armhf.deb
+    - https://github.com/miniflux/v2/releases/download/2.3.1/miniflux_2.3.1_riscv64.deb
+---
+
+### Security
+
+* Fixed an OAuth account binding vulnerability that could allow users to associate arbitrary OAuth identities with their account. 
+* Fixed an open redirect vulnerability caused by backslashes in relative redirect URLs. 
+* Fixed a potential SQL injection vulnerability in dynamically generated `ORDER BY` clauses. 
+* Hardened metrics endpoint authentication by using constant-time credential comparisons. 
+
+### Bug Fixes
+
+* Fixed an issue where the stdlib cross-origin protection middleware could block legitimate requests in certain self-hosted environments. The middleware has been reverted.
+
+### Improvements
+
+* Added Korean language support. 
+* Improved HTML truncation performance and reduced memory allocations. 
+* Optimized feed discovery, subscription detection, date parsing, and tag filtering. 
+* Simplified and refactored several storage and query-building components for better maintainability. 
+
+### Dependencies
+
+Updated several dependencies, including:
+
+* `github.com/go-webauthn/webauthn` 0.17.4
+* `golang.org/x/crypto` 0.52.0
+* `golang.org/x/image` 0.41.0
+* `golang.org/x/net` 0.55.0
+
+---
+
+As always, thank you to all contributors who helped improve Miniflux in this release.