Comparison

Wiki.js vs BookStack

Wiki.js and BookStack both land on Depends.

Wiki.js

Depends

Confidence: Medium

Great fit if a technical person will own hosting, upgrades, and patching of a free, powerful wiki.

Depends

Confidence: Medium

A strong buy if you're a small team or individual comfortable running and patching your own server . it's free, mature, and well-liked.

Wiki.js versus BookStack
Compare	Wiki.js	BookStack
Verdict	Depends	Depends
Best for	Technical self-hosters	Self-hosters and homelab users
Who it's not for	Non-technical teams wanting one-click setup	Teams with nobody to run and patch a server
Privacy	Multiple public CVEs including recent authentication bypass (through 2.5.314) and privilege escalation . patch discipline is mandatory.^⁷	Active project with frequent security releases . but multiple public CVEs, including auth bypasses and RCE, mean prompt patching is essential.
Support quality	Community support; paid help via hosts	Community-driven; no vendor support evidence found
Public sentiment	Self-hosters praise its power and flexibility but repeatedly flag it as heavy to run and maintain.^⁵	Users consistently praise BookStack's simplicity and structure for small teams, while flagging limited customization and its small-scale fit.¹³
Biggest gotcha	Running it well needs ongoing ops: upgrades, backups, CVE patching. Recent bypass CVEs hit older versions.^⁷	Repeated auth-bypass and RCE CVEs . you must patch quickly or stay exposed.