Back to Catalog
ntfy logo

ntfy

Send push notifications to your phone or desktop using PUT/POST

app

Alternative to: Pushover, Pushbullet

Website Repository Docs
ntfy screenshot
About Versions (102)
Back to Versions

v2.22.0

2026-04-21

Bug fixes + maintenance:

  • Tighten web push endpoint allow-list regex to prevent SSRF via unanchored pattern matching (GHSA-w9hq-5jg7-q4j7, thanks to @MightyNawaf for reporting)
  • Fix web app not allowing access tokens to be changed to never expire (#1693/#1694, thanks to @lastsamurai26 for reporting and to @ShipItAndPray for fixing)
  • Fix web app crashing on account page for tokens without a last access time (#1651, #1684, thanks to @Pulsar7 and @rzhli for reporting)
Changelog on GitHub →