We have released NodeBB versions v2.8.19, v3.12.6, and v4.4.3 to address a security issue involving a potential XSS vector.
If you discover a vulnerability, please report it responsibly via our bug bounty program.
As mentioned before, we are going to support 2.x up to August 2025.
You must log in or # to comment.