Security Release: NodeBB v2.8.18, v3.12.5, v4.3.2
NodeBB Development
1
Posts
1
Posters
6
Views
-
We have released NodeBB versions v2.8.18, v3.12.5, and v4.3.2 to address a security issue involving a potential XSS vector and a SQL injection vulnerability. We strongly recommend all users update to the latest patch version for their respective branches:
If you discover a vulnerability, please report it responsibly via our bug bounty program.
As mentioned before, we are going to support 2.x to to August 2025.
-
System shared this topic
