Wandering Adventure Party

We have released NodeBB versions v2.8.20, v3.12.7, and v4.4.4 to address a security issue.

• v4.4.4 Release Notes

• v3.12.7 Release Notes

• v2.8.20 Release Notes

If you discover a vulnerability, please report it responsibly via our bug bounty program.

As mentioned before, we are going to support 2.x up to August 2025.

We have released NodeBB versions v2.8.19, v3.12.6, and v4.4.3 to address a security issue involving a potential XSS vector.

• v4.4.3 Release Notes

• v3.12.6 Release Notes

• v2.8.19 Release Notes

If you discover a vulnerability, please report it responsibly via our bug bounty program.

As mentioned before, we are going to support 2.x up to August 2025.

julian said in Topic thumbnails, uploads, and media display: > Perhaps the media row is best used to showcase topic thumbnails and post attachments only (not inlined media.)

This makes sense I think :think:

We have released NodeBB versions v2.8.18, v3.12.5, and v4.3.2 to address a security issue involving a potential XSS vector and a SQL injection vulnerability. We strongly recommend all users update to the latest patch version for their respective branches:

• v4.3.2 Release Notes

• v3.12.5 Release Notes

• v2.8.18 Release Notes

If you discover a vulnerability, please report it responsibly via our bug bounty program.

As mentioned before, we are going to support 2.x to to August 2025.

On windows you need to enable notifications in the OS settings, it wasn’t working without that for me.