NodeBB Development

0 readers

1 users here now

Stay tuned here to hear more about new releases and features of NodeBB!

This is a forum category containing topical discussion. You can start new discussions by mentioning this category.

founded 6 months ago

NodeBB 2.8.17 & 3.3.5 Security Releases (community.nodebb.org)

submitted 2 years ago by baris@community.nodebb.org to c/nodebb-development@community.nodebb.org

1 comments fedilink hide all child comments

Today we are releasing patch versions for 3.x and 2.x lines to fix an xss vulnerability.

As mentioned before we will be supporting 1.x and 2.x until August 2024 and August 2025 respectively. This vulnerability does not effect the 1.x releases so there is no patch for it.

The fix is included in the latest 2.8.17 & 3.3.5 releases https://github.com/NodeBB/NodeBB/releases/tag/v2.8.17 https://github.com/NodeBB/NodeBB/releases/tag/v3.3.5

top 1 comments

sorted by: hot top controversial new old

[–] baris@community.nodebb.org 1 points 2 years ago* (last edited 3 months ago)

@FrankM the issue with our package manager should be fixed now, can you try again?