This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+2 more
Affected surfaces
ReleasePort's take
Moderate signalLinkwarden v2.15.0 introduces extensive security hardening and strongly recommends updating to this release.
Why it matters: The update performs comprehensive security hardening; the fact explicitly urges updating to version 2.15, making immediate action critical for all deployments.
Summary
AI summarySecurity hardening added across Linkwarden.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | High |
Performs extensive security hardening; strongly recommends updating to 2.15. Performs extensive security hardening; strongly recommends updating to 2.15. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds highlight and annotate feature with four colors and notes. Adds highlight and annotate feature with four colors and notes. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds True offline mode for background downloading of preserved formats. Adds True offline mode for background downloading of preserved formats. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds Link details sheet accessible via long‑press on any link. Adds Link details sheet accessible via long‑press on any link. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds customizable reader view options for font, size, line height, and background color. Adds customizable reader view options for font, size, line height, and background color. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Feature | Medium |
Adds support for any OpenID Connect provider via generic OIDC configuration. Adds support for any OpenID Connect provider via generic OIDC configuration. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Performance | Medium |
Improves web app memory usage, roughly halving idle consumption from ~700 MB to ~350 MB. Improves web app memory usage, roughly halving idle consumption from ~700 MB to ~350 MB. Source: llm_adapter@2026-07-15 Confidence: high |
— |
| Performance | Medium |
Reduces Docker image size by ~50 %, dropping from ~3.0 GB to ~1.5 GB. Reduces Docker image size by ~50 %, dropping from ~3.0 GB to ~1.5 GB. Source: llm_adapter@2026-07-15 Confidence: high |
— |
Full changelog
Hello everyone!
Today, we’re excited to announce that Linkwarden is getting one of its largest mobile updates so far, along with a web app that’s much lighter to run.
For those who are new here, Linkwarden is a tool for collecting, organizing, reading, and preserving webpages, articles, and documents in one place. Linkwarden is available as a Cloud offering, or you can self-host it on your own server.
Let's get into it.
What's new on mobile:
🖍️ Highlight and annotate
You can now highlight text in the reader view, pick from four colors, and attach a note to any highlight.
There's also a new Notes & Highlights view per article which lets you skim what you've marked and jump to it in the text.
📥 True offline mode
Previously, the app only saved preserved formats for links you had already opened. Now, you can turn on Save for offline access in the settings, and the app will download every preserved format in the background as you browse.
🪪 Link details sheet
Long-press any link to open Link Details, which shows all the information about a link in one sheet, similar to the web app.
📖 Customizable reader view
Adjust font, text size, line height, and background color as you read.
What's new on the web:
🧠 Much lower memory usage
Linkwarden 2.15 roughly halves idle memory usage, from around 700 MB down to about 350 MB.
It's worth mentioning that after a heavy workload, memory may stay higher because the runtime keeps previously allocated memory ready for reuse. This is expected and is not a memory leak.
If you don't need webpage preservation, setting DISABLE_BROWSER=true skips that work entirely, keeping the instance right at the ~350 MB mark. Otherwise, for a leaner setup, you can use:
MALLOC_ARENA_MAX=2
NODE_OPTIONS=--max-old-space-size=400
ARCHIVE_TAKE_COUNT=1
These settings limit memory pools, cap the app's heap, and preserve one link at a time to keep spikes smaller.
🐳 A much smaller Docker image
The Docker image has also been cut in half, dropping from roughly 3.0 GB to 1.5 GB.
🔑 Generic OIDC provider
Self-hosters can now connect any OpenID Connect identity provider. Check it out in the docs!
🔒 Increased security
A good chunk of this release went into security hardening. We strongly recommend updating to 2.15.
There's more...
As always, there's a long tail of smaller improvements across the web and the mobile app.
Full Changelog: https://github.com/linkwarden/linkwarden/compare/v2.14.1...v2.15.0
Thanks!
Thanks to everyone using Linkwarden, reporting bugs, suggesting improvements, contributing to the project, responsibly disclosing security issues, and supporting its development. Your contributions genuinely shape every release.
Special thanks to @profiteroles1, @bebound, @zero77, @idarlafish, @martiGIT, @Anthomos, @christopherjnash, @saschabuehrle, @ppfeister, @nekros1xx, @mvalentsev, @datosh, @Dredsen, @SakusenSec, @kah-ja, @kocaemre, @eddieran, @5ud0er, @clzoom, @guervild, @ashvinctrl, @456789TZ, and @Faze-up for their code contributions, bug reports, testing, security research, and responsible vulnerability disclosures. They all rock! 💙
If you'd like to try Linkwarden without dealing with server setup and maintenance, our Cloud offering is the easiest way to get started.
We hope you enjoy the latest Linkwarden updates!
Security Fixes
- Comprehensive security hardening across the platform
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About linkwarden
⚡⚡⚡ Self-hosted collaborative bookmark manager to collect, read, annotate, and fully preserve what matters, all in one place.
Related context
Related tools
Beta — feedback welcome: [email protected]