Skip to content

linkwarden

v2.15.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 16d Productivity & Wikis
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

bookmark bookmark-manager collaboration nextjs react-native read-it-later
+2 more
self-hosted typescript

Affected surfaces

auth

ReleasePort's take

Moderate signal
editorial:auto 11d

Linkwarden v2.15.0 introduces extensive security hardening and strongly recommends updating to this release.

Why it matters: The update performs comprehensive security hardening; the fact explicitly urges updating to version 2.15, making immediate action critical for all deployments.

Summary

AI summary

Security hardening added across Linkwarden.

Changes in this release

Security High

Performs extensive security hardening; strongly recommends updating to 2.15.

Performs extensive security hardening; strongly recommends updating to 2.15.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Adds highlight and annotate feature with four colors and notes.

Adds highlight and annotate feature with four colors and notes.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Adds True offline mode for background downloading of preserved formats.

Adds True offline mode for background downloading of preserved formats.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Adds Link details sheet accessible via long‑press on any link.

Adds Link details sheet accessible via long‑press on any link.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Adds customizable reader view options for font, size, line height, and background color.

Adds customizable reader view options for font, size, line height, and background color.

Source: llm_adapter@2026-07-15

Confidence: high

Feature Medium

Adds support for any OpenID Connect provider via generic OIDC configuration.

Adds support for any OpenID Connect provider via generic OIDC configuration.

Source: llm_adapter@2026-07-15

Confidence: high

Performance Medium

Improves web app memory usage, roughly halving idle consumption from ~700 MB to ~350 MB.

Improves web app memory usage, roughly halving idle consumption from ~700 MB to ~350 MB.

Source: llm_adapter@2026-07-15

Confidence: high

Performance Medium

Reduces Docker image size by ~50 %, dropping from ~3.0 GB to ~1.5 GB.

Reduces Docker image size by ~50 %, dropping from ~3.0 GB to ~1.5 GB.

Source: llm_adapter@2026-07-15

Confidence: high

Full changelog

Hello everyone!

Today, we’re excited to announce that Linkwarden is getting one of its largest mobile updates so far, along with a web app that’s much lighter to run.

For those who are new here, Linkwarden is a tool for collecting, organizing, reading, and preserving webpages, articles, and documents in one place. Linkwarden is available as a Cloud offering, or you can self-host it on your own server.

Let's get into it.

What's new on mobile:

🖍️ Highlight and annotate

You can now highlight text in the reader view, pick from four colors, and attach a note to any highlight.

There's also a new Notes & Highlights view per article which lets you skim what you've marked and jump to it in the text.

📥 True offline mode

Previously, the app only saved preserved formats for links you had already opened. Now, you can turn on Save for offline access in the settings, and the app will download every preserved format in the background as you browse.

🪪 Link details sheet

Long-press any link to open Link Details, which shows all the information about a link in one sheet, similar to the web app.

📖 Customizable reader view

Adjust font, text size, line height, and background color as you read.

What's new on the web:

🧠 Much lower memory usage

Linkwarden 2.15 roughly halves idle memory usage, from around 700 MB down to about 350 MB.

It's worth mentioning that after a heavy workload, memory may stay higher because the runtime keeps previously allocated memory ready for reuse. This is expected and is not a memory leak.

If you don't need webpage preservation, setting DISABLE_BROWSER=true skips that work entirely, keeping the instance right at the ~350 MB mark. Otherwise, for a leaner setup, you can use:

MALLOC_ARENA_MAX=2
NODE_OPTIONS=--max-old-space-size=400
ARCHIVE_TAKE_COUNT=1

These settings limit memory pools, cap the app's heap, and preserve one link at a time to keep spikes smaller.

🐳 A much smaller Docker image

The Docker image has also been cut in half, dropping from roughly 3.0 GB to 1.5 GB.

🔑 Generic OIDC provider

Self-hosters can now connect any OpenID Connect identity provider. Check it out in the docs!

🔒 Increased security

A good chunk of this release went into security hardening. We strongly recommend updating to 2.15.

There's more...

As always, there's a long tail of smaller improvements across the web and the mobile app.

Full Changelog: https://github.com/linkwarden/linkwarden/compare/v2.14.1...v2.15.0

Thanks!

Thanks to everyone using Linkwarden, reporting bugs, suggesting improvements, contributing to the project, responsibly disclosing security issues, and supporting its development. Your contributions genuinely shape every release.

Special thanks to @profiteroles1, @bebound, @zero77, @idarlafish, @martiGIT, @Anthomos, @christopherjnash, @saschabuehrle, @ppfeister, @nekros1xx, @mvalentsev, @datosh, @Dredsen, @SakusenSec, @kah-ja, @kocaemre, @eddieran, @5ud0er, @clzoom, @guervild, @ashvinctrl, @456789TZ, and @Faze-up for their code contributions, bug reports, testing, security research, and responsible vulnerability disclosures. They all rock! 💙

If you'd like to try Linkwarden without dealing with server setup and maintenance, our Cloud offering is the easiest way to get started.

We hope you enjoy the latest Linkwarden updates!

Security Fixes

  • Comprehensive security hardening across the platform

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track linkwarden

Get notified when new releases ship.

Sign up free

About linkwarden

⚡⚡⚡ Self-hosted collaborative bookmark manager to collect, read, annotate, and fully preserve what matters, all in one place.

All releases →

Related context

Beta — feedback welcome: [email protected]