NodeBB v4.15.0 — QoL and security updates, plus a few new features
I realized we didn't put together any release notes for v4.15.0, so here they are
For reference, v4.15.0 was released 12 August 2026.
[...]
Security Fixes
We receive many reports for vulnerabilities via our bug bounty program, and we encourage people to poke around and find vulnerabilities to report.
Note that as of today (1 September 2026), any reports compiled with the help of large language models are exempt from the bounty payment.
From v4.14.0 to v4.15.0 there were at least five security fixes shipped — we encourage all admins to update to the latest stable version at all times.
Instant voting
Voting on posts used to wait for the round-trip to complete. On high-volume instances this caused a bit of a delay between a vote and its response, so the front-end now just reflects the new vote without waiting for a confirmation from the backend.
Upload UI redesigned
@baris says "feat: update uploads to look nicer
" so purportedly, it looks nicer. Check it out
ActivityPub updates
Chat privileges are now exposed for fediverse users. Existing sites should automatically grant this privilege to the fediverse user. If you want to restrict chat messages from remote users, disable this setting.
A couple of server-side improvements to the ActivityPub note/reply handlers so fewer database calls are made.
Queued topics now automatically pull for replies when accepted, without waiting for someone to enter the topic itself.
Added a configurable age cutoff for auto-categorization filters.
Activity Intents are now properly gated behind the global "activitypub enabled" switch.
