v2.21.8
leaningtech/webvmv2.21.8May 22, 2026by egelhaus
AI Summary
A critical security update addressing multiple vulnerabilities (PSA-2026-2CAQ96, PSA-2026-WWFR8X, PSA-2026-Q3TCPK), alongside new features including a contributor form, post creation tracking, and UI improvements.
Key Highlights
- Addresses three critical security vulnerabilities
- Introduces a contributor form and post creation method tracking
- Enhances UI with scrollable notifications and modal overflow fixes
- Adds state filters for the list view
New Features
- Contributor form
- Scrollable notification list with time
- hasExtension helper for media type detection
- Post creation method tracking (WEB/API/MCP/AUTOPOST)
- State filter (all/scheduled/draft/published) for list view
- TikTok pending-share error clarification
- TikTok title/content restriction notice
Full Release Notes
> [!WARNING] > This release addresses the security vulnerability [PSA-2026-2CAQ96](https://gadvisory.org/advisories/PSA-2026-2CAQ96), [PSA-2026-WWFR8X](https://gadvisory.org/advisories/PSA-2026-WWFR8X) and [PSA-2026-Q3TCPK](https://gadvisory.org/advisories/PSA-2026-Q3TCPK), all users are recommended to upgrade immediately. ## What's Changed * fix: properly handle error in discord provider by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1479 * fix: remove processing GIF via sharp in linkedin by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1483 * feat: contributor form by @egelhaus in https://github.com/gitroomhq/postiz-app/pull/1482 * fix: lowercase email on local registration by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1494 * feat: update notification list to be scrollable and added time by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1489 * ui: update the modal such that for long text won't cause overflow by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1488 * feat: hasExtension helper for media type detection by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1515 * feat: track post creation method (WEB/API/MCP/AUTOPOST) by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1514 * Clarify TikTok pending-share error mentions the 24-hour window by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1539 * Show TikTok title/content restriction notice for video posts by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1537 * Add state filter (all/scheduled/draft/published) to list view by @bsantosh909 in https://github.com/gitroomhq/postiz-app/pull/1538 ## New Contributors * @bsantosh909 made their first contribution in https://github.com/gitroomhq/postiz-app/pull/1479 **Full Changelog**: https://github.com/gitroomhq/postiz-app/compare/v2.21.7...v2.21.8