NodeBB

Release build (patch) of NodeBB @ 2026-08-06T02:22:00.160Z

v4.14.8 (2026-08-06)

Bug Fixes

• typo on reauthAt (f29db71c)
• don’t save req into post queue (28899f7c)
• closes #14553, closes #14554 (37c18536)
• sanitize system messages (f5be7f6d)
• handle both local and remote users’ aboutme identically (3f18849c)
• validate group hex colors (a30dfd18)
• add priv check to loading profile pictures (707bfe03)
• reject invalid cid in topic post route (35c4975f)
• xss in room rename event in chat modals (55b1ea5f)
• api: exclude cookie header from buildReqObject to prevent session token exposure in post queue (e44d9098)

Refactors

• set ip on defaultPostData from req (26df22dc)
• rss feeds (c51b47ff)

Tests

• fix relative_path test (99407bb0)