Security Release: NodeBB v2.8.18, v3.12.5, v4.3.2
Uncategorized
1
Posts
1
Posters
10
Views
-
We have released NodeBB versions v2.8.18, v3.12.5, and v4.3.2 to address a security issue involving a potential XSS vector and a SQL injection vulnerability. We strongly recommend all users update to the latest patch version for their respective branches:
If you discover a vulnerability, please report it responsibly via our bug bounty program.
As mentioned before, we are going to support 2.x to to August 2025.
-
N NodeBB Development shared this topic on
