Uptime Kuma

Bug fix: corrected false positive for Google Chrome during migration; also updated SECURITY.md to revise supported versions and Docker tags.

Bug fix: resolved an issue where the healthcheck could shut down Uptime Kuma during migrations (ref #6204).

Major v2 release with breaking changes; adds Nextcloud Talk, Brevo, Evolution API, autofocus 2FA, and Slovak; improves proxy support and mobile UI, fixes startDateTime, ping default, and ip_family; patches security (proxy-agent/vm2, deps) and updates translations.

Fixed browser monitor issue caused by Debian Buster EOL; updated dependencies and patched SSTI vulnerability in notification templates that could reveal arbitrary files.

Security: updated dependencies and fixed CVE-2024-56331 LFI via improper URL handling in Real-Browser monitor (GHSA-2qgm-m29m-cj2h).

In 1.23.14, a crash issue is fixed with a quick fix for Alpine image and Node.js <=16 users by pinning cheerio to avoid the undici breaking change.

Improves API Keys disabled message when auth is off and fixes status page icon display after upload; updates dependencies for security.

Bug fixes: fixed localization edge cases in language settings and TLS issues including proxy TLS certificate retrieval and Prometheus update.

This release adds i18n and proxy guidance, improves mail subsystem helptext and TLS cert retrieval via keylog events, fixes numerous bugs (auth, i18n, notifications, JSON parsing, TLS info FK), and applies security updates (nodemailer, axios, dompurify) plus CI and misc refinements.

Dependencies updated; fixes include origin undefined in error handling and resolution of the non-docker Tailscale monitor issue that was broken in 1.23.8.

This release removes the need for reverse-proxy reconfiguration after patch 1.23.9, instructs users who set UPTIME_KUMA_WS_ORIGIN_CHECK=bypass to remove it, and fixes the incomplete patch for GHSA advisories.

This release adds WebSocket origin check controls via UPTIME_KUMA_WS_ORIGIN_CHECK (cors-like or bypass), fixes maintenance timezone, button types, adds aria-label for search and ntfy priority helptext, and addresses security advisories.

This release sets default Retries to 0, improves accessibility, adds support for /snap/bin/chromium on Ubuntu, fixes a Tailscale monitor freeze, and updates dependencies to gamedig 4.2 and apprise 1.6.

Release includes timeout message improvements and better abort error handling, a memory leak fix for Postgres connections, reverted restart on no-heartbeat, security fixes for GA ID XSS and Tailscale ping, access controls, plus minor refactors.

Note for Docker users: DNS resolver behavior changed with the Node.js 18 base image; also fixed a TLS issue affecting Node.js <=16 (see #4044).

Fixes include pausing-resume bug for monitors, re-enabling legacy TLS renegotiation, final fixes for Kafka migration script and timeout issues, plus minor refactors and doc updates.

Improves stability with auto-restart on heartbeat loss, upgrades Docker to Node.js 18, and fixes multiple monitor issues (timeouts, SSL, queries, passwords, rounding, validation, and Kafka settings) across Postgres/MySQL/MSSQL/HTTP/Push.

Security: all sessions will be logged out and tokens may need regenerating; unofficial tools may break, fixes

Bug fixes: correct Tailscale monitor display for non-Docker users; prevent paused monitors from restarting after edits; fix duplicate status page items on save; restore OAuth2 auth method; reintroduce missing HTTP options in JSON query monitor.

Release includes improvements for password manager, DNS message handling, Discord host:port display, and Docker nscd toggle; fixes tagging deletion, Safari filter, Docker monitor with docker.sock, and EU region for Opsgenie; plus translations and minor refactors.

Uptime Kuma v1.23.x is the final v1 minor release, continuing bug fixes while introducing numerous new features (advanced monitor filtering, bulk actions, new monitors) and improvements as v2 development begins.

Improvements: Uptime Kuma now respects your setting to skip update checks; Bug fix: auto theme for status pages on custom domains is fixed; Security: removed all unreleased plugin feature code to close vulnerabilities (GHSA advisories linked).

This release adds Monitor Group view, badge generator, auto theme for status pages, ntfy token support, and tag display; fixes ping metric parsing, gRPC URL issues, and MySQL disconnects; plus numerous UI, performance, and notification improvements.

Fixes: maintenance timezone start timing and “Same as Server Timezone” save, plus dependency updates (notably Socket.io/engine.io security advisory); always back up Uptime Kuma before upgrading.

Backup before upgrading; maintenance is now cron-based with duration, supports per-maintenance timezones and DST; breaking: Last 2nd/3rd/4th day of month options removed; review UTC shifts; no auto DB backup during migrations.

This release adds monitor cloning, API keys management, Markdown support on status pages, mTLS for HTTP(S), XML request body support, an Add Tag button, monitor descriptions, PagerTree provider, Apprise 1.3.0, and Windows x64 portable exe, plus fixes and improvements.

Upgrade now with sufficient disk space and a backup beforehand; fixes include MongoDB driver memory leak and recompiled healthcheck.go to address 1.20.0 issues.

Before upgrading ensure sufficient disk space and back up services; this release fixes database deletion when disk space is low and prevents Postgres monitor crashes if the query is missing, adds Finnish translation, and includes minor refactors.

This release adds new monitors (GameDig, Redis, MongoDB), Tags Manager and Status Page improvements, environment config via .env, plus bug fixes, security patch, and UI/mobile tweaks.

Bug fix: Restored functionality of the Ping monitor on Windows.

Release adds Splunk notification provider and Help button; fixes maintenance count, ping/Postgres monitors, MQTT protocol support, PromoSMS long messages, and patches security vulnerabilities (knex.js); upgrade recommended.

This release fixes Docker Monitor down handling, tag issues, validates Keep Monitor History Days, improves ping monitoring across Linux distros, removes redundant Pushover title, updates Apprise to 1.2.1, plus general bug fixes, refactors, and translations.

Release includes Hebrew translation, Zoho and Kook notifications, Slack display fix, MS SQL monitor isolation fix, gRPC size error fix, duplicate maintenance message on status page, plus general bug fixes and refactors.

Fixed a UI layout/glitch that occurred after removing a monitor.

Bug fixes: resolve HTTP Monitor issues from 1.19.0 and restore Docker monitor notifications (Discord); ongoing improvements include code refactoring and language files updates.

Adds maintenance mode with status messages, gRPC/MySQL monitors, socks5h, SMSEagle and Ntfy icon support, server timezone config (logs use it), webhook headers, route/radius fixes, DNS cache toggle (off by default), SQLite 3.39.4, date/undefined fixes, German (Switzerland), Docker healthcheck improvements, uptime cache.

Fixed incorrect use of JESec in 1.18.4, restoring status page features and custom CSS functionality.

Fix ntfy issue reintroduced in 1.18.1 resolved; username no longer required; new Greek language support; thanks to contributors; includes bug fixes, refactoring, language updates, and code reviews.

Adds free.fr SMS notification and Europe demo server; fixes ntfy 1.18.1 issue (update to 1.18.3) and multi-IP handling in X-Forwarded-For; hides console window for Windows ping monitor.

Fixed Docker container monitor issue in version 1.18.1.

Adds multiple notifications (GoAlert, SMSManager, ServerChan, Squadcast) and Cypress for e2e testing; fixes Bark and Octopush errors; ntfy authentication support; improved password manager compatibility; plus general bug fixes, refactoring, and language updates.

Adds Docker/PostgreSQL/Radius monitors, resending on repeated downs; clickable status links; Trusted X-Forwarded headers; Basque and pt-PT languages; DNS caching; new alerts: AlertNow/Line Notify/Home Assistant; Bark settings; Apprise 1.0.0; status badge label; UI/mobile tweaks.

Fixed: Reverted DNS caching for HTTP(S) monitor to address issue #1821.

Uptime Kuma 1.17.1 adds MS SQL Server monitor, ntfy and NTLM auth notifications, cert expiry alerts, DNS cache for HTTP(s), pre-rendered status HTML, gzip/Brotli, 50-char HTTP keyword fallback, 404 handling, log reduction, and various fixes.

Fix tags not showing on status pages and synchronize push monitor heartbeat to fix a race condition.

Release adds badges API, optional Apprise title, PagerDuty notification, Thai language, DNS Monitor resolver port, fixes uptime calculation for push monitors, chart error on recent, aliyun-sms SignatureDoesNotMatch, and broader Discord service address support.

Fix settings save in No Auth mode; add status parameter to push URL; Docker: Apprise updated to 0.9.8.3; Docker Debian: cloudflared updated to 2022.4.1.

Priority of Arguments now overrides Environment Variables; adds MQTT monitor; fixes restore backup; Status Page CSS/Footer/Powered by; new logout dropdown; improved logging; new OneBot/PushDeer notifications; Apprise 0.9.8; SQLite 3.38.

Fixed a crash in Uptime Kuma 1.14.0 that occurred at night (#1520).

Adds custom domains for status pages, Cloudflare Tunnel reverse proxy, HTTP(S) monitor proxy settings, status page favicon, Ukrainian language, invalid-page 404, removes Prometheus metrics on delete, fixes Alerta and Mattermost issues, and switches SQLite to FULL synchronous mode.

Fix setup issue for new non-Docker users (addressing issue #1460) https://github.com/louislam/uptime-kuma/issues/1460

Adds multi-status pages, favicon down-count, and status page edit mode; updates Apprise to 0.9.7; new notifications Gorush, Alerta, Push by Techulus; UI tweaks, beta updates option, Pushover fix, /metrics basic auth, Node.js 16, sticky monitor list, and bug fix #1409.

Fixed channel search issue (#1298), added Čeština language, and updated axios to 0.26.0 to address a vulnerability.

Updates include vulnerable package fixes, BSD ping support for all variants, a bug fix (#1024), and password manager autofill support; plus ongoing bug fixes, refactors, and language file updates.

Fixed Google Chat notification issue and resolved SMTP DKIM crash on the server.

Release adds Google Chat and WeCom notifications, SMTP DKIM support, Slovenščina language, fixes HTTP Basic Auth auto-complete, and improves handling for sites that only serve text/html.

Fixed a Safari-related issue.

Release includes redesigned Settings, new notification providers (SerwerSMS.pl, Stackfield), Basic Auth, 2FA removal, status page grouping, improved bundle size, bug fixes (Pushover, push-down), npm vulnerabilities fixed, plus Docker Node 14.18.2 and Apprise 0.9.6.

1.10.2 fixes the settings page not working when authentication is disabled.

Adds display of monitor tags on the Status Page (toggleable); fixes a monitor-stuck bug; and adds a tooltip on the uptime pill in the monitor list.

Adds ping period control, cert expiry alerts, and a shrink DB button; new Bark and ClickSendSMS notifications; Vietnamese, Croatian, and Traditional Chinese; bug fixes and improvements (login rate limit, 2FA hardening, strong passwords, error log, etc.); breaking change: iframe same-origin workaround.

Addresses a high-severity 2FA vulnerability (bug #833); upgrade now if you rely on 2FA.

Fixed issue #742; see the 1.9.0 release notes for the full changelog.

New features include custom HTTP methods/headers/body, auto-clear monitor data, Steam Game Server monitor, SMTP subject, PM2 config; new notifications Feishu/Aliyun SMS/DingDing; Norwegian language; bug fixes (uptime, missing UP, FreeBSD hostname) and 2FA hardening.

New Push monitor type; show full certificate chain; default browser language; new PromoSMS/Matrix/Legacy Octopush notifications; Bulgarian, Hungarian, Farsi RTL support; slim Docker image

Fixes: resolves the retries problem (#506) and fixes non-Docker installation failures caused by vite.js 2.6.x.

Change /status-page to /status; Docker: fix ping by rolling back to root on Debian, add Bulgarian language, include dumb-init to prevent zombie processes, and upgrade Node.js to 14.18.0.

Initial release includes status page, 2FA (Authy/Google Authenticator), tags for monitors/search, retry interval, improved backup/restore, Teams notification, Portuguese language, PWA Add-to-Homescreen, non-root Docker user, and SQLite 3.36.0.

Uptime Kuma 1.x adds full backup/restore for monitors and notifications, faster performance, default notifications, new languages (ET/IT/PL/SV), enhanced SMTP (cc/bcc/multi-addresses/sender name/ignore TLS), UI/UX improvements, slim Debian Docker base, and fixed healthcheck (alpine tag caveat).

Adds Danish, Dutch, Japanese, Korean, Russian, Serbian Cyrillic/Latin, Simplified Chinese, Spanish, Swedish; enables HTTPS via SSL env vars or --ssl-key/--ssl-cert; adds Debian Docker image; notes Alpine downtime issues.

Revert to node-sqlite3 from better-sqlite3 due to installation issues; follow the update guide and report bugs via the linked GitHub pages.

Adds DNS monitor, new languages (Traditional Chinese, German, French), Mattermost/Rocket.Chat notifications, K8s template, major frontend/ui improvements, lower RAM usage, longer ping timeout, ARM prebuilt, npm install fix, and switch to better-sqlite3 with WAL.

Resolved a memory leak to improve stability and prevent runaway memory usage.

Improved RAM usage and added automatic version checks; see the update guide for upgrading and report bugs at the issues page.

Uptime Kuma updates: reduce high ping/DNS issues, new monitor styles, improved ping charts and mobile optimization, easier installer, Line Messenger Notification Service, fix SMTP no auth, page-change animation, and switch SQLite to WAL.

Release adds Ping Graph, improved IPv6 support, and new Pushbullet and Octopush notifications (thanks to contributors).

Adds dark mode, accepted HTTP status codes and 3xx redirects, CLI password reset, pushy notifications, search engine indexing control, customizable Discord bot name, Font Awesome icons, and essential security updates.

Release adds TLS error ignore, Upside Down Mode, optional auth disable, LunaSea notifications, font-awesome icons, Prometheus /metrics, plus dev: eslint and simpler Apprise install.

Adds a new HTTPS certificate information view and a configurable maximum retry limit before a service is marked down and a notification is sent.

Adds Pushover and Slack notifications; bundles Apprise for 50+ services in Docker; plus miscellaneous improvements.

Added Slack Webhook support and various improvements.

Adds Gotify support and fixes the arm/v7 Docker build issue affecting Raspberry Pi 3.

Fix missing timezone; breaking change: Discord via webhook; add Signal notification; bcrypt password hashing; reset auto increment for new instance; show version in footer; SMTP no longer requires username/password.

This release is reported as broken; downgrade to version 1.0.3 is recommended.

Bug fixes from the community (issues #5, #10) and added the option to change the listening port and hostname when running the server directly (no Docker).