Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
Brand Logo

Cloudron Forum
  • girishG

    PeerTube - Package Updates

    Pinned Locked PeerTube
    83
    2 Votes
    83 Posts
    39k Views
    Package UpdatesP
    [4.6.9] Update PeerTube to 8.1.8 Full Changelog We have learned that the SQL injection vulnerability fixed in v8.1.6 has been exploited at scale since at least May 18, 2026 and so before the v8.1.6 release. According to our investigation, the attacker exploited this SQL injection to generate a token for the root user and install the peertube-plugin-google-analytics-js plugin. This plugin imports a client script from hxxps://www.googie-anaiytics.com/jquery.ui.js that currently only logs a line in the web browser. Automatically remove peertube-plugin-google-analytics-js in v8.1.8 Invalidate OAuth tokens in v8.1.8 (all users must log in again) Add a new user.disable_root_auth config key to disable root token usage Remove the plugin from the plugin registry Upgrade to v8.1.8 as soon as possible Review newly created users and videos Review your instance configuration, especially Configuration -> Customization -> JavaScript/CSS Review installed plugins
  • imc67I

    client_max_body_size 2m in /api/ location blocks the large blocklists

    Unsolved Support api nginx
    9
    1 Votes
    9 Posts
    156 Views
    robiR
    @james Thank you for the offer James! @imc67 There is a loving community here for useful Cloudron solutions and you have one there by your own account. I am sure we can find help making a custom community app and possibly even a maintainer who will use it and love it daily. Like @timconsidine who has been scratching his own itches for some time, you did too and I for one am grateful for that!
  • marcusquinnM

    NostrVPN

    Discuss
    9
    2
    5 Votes
    9 Posts
    418 Views
    marcusquinnM
    @girish that's true! thankfully never had any Cloudron security breaches, but the existence of all apps is visible to the public web, and with AI now able to find zero-day exploits so quickly, data-security risks are increasing one way to mitigate that is if the apps were limited to access only from those with access to it via their mesh vpn maybe it's already possible with asking AI to set all that up, but i'm just thinking out loud for the ordinary person that might not want to tinker with that and just have it as a an option out of the box
  • F

    Cloudron dashboard not responding - box and cloudron-firewall failing

    Solved Support dashboard docker troubleshoot
    7
    1 Votes
    7 Posts
    169 Views
    F
    Hi, The issue is fixed now. I backed up /etc/docker/daemon.json, deleted it, then ran: systemctl daemon-reload systemctl restart docker Docker is now running again and Cloudron/apps are accessible. Thanks for your help!
  • T

    Skip older Cal packages

    Cal.com
    9
    2 Votes
    9 Posts
    118 Views
    jdaviescoatesJ
    @james said: With the Dry run restore when taking this path you can also ensure that everything is working as intended reducing possible downtimes. Exactly
  • nebulonN

    Etherpad Lite - Package updates

    Pinned Locked Etherpad Lite
    46
    0 Votes
    46 Posts
    34k Views
    Package UpdatesP
    [4.9.0] Update etherpad-lite to 3.2.0 Full Changelog HTTP accept X-Forwarded-Prefix and X-Ingress-Path under trustProxy (#7802 / #7806). Admin settings resolved runtime values surface on env-pill chips (#7803 / #7807). Admin pads filter chip now applies server-side, before pagination (#7798). Pad outdated notice author now resolved from token cookie, not session (Qodo #7804 / #7805). Localisation silence spurious "could not translate element content" warning (#7797). CI swap archived ep_readonly_guest for ep_guest in the plugin matrix (#7795 / #7808). Tests admin saveSettings round-trip + cross-restart persistence (#7819 / #7820 / #7821). Bug report template now asks contributors whether the abstraction in their proposed fix matches the rest of the codebase, to head off premature-generalisation fixes earlier in review. ueberdb2 6.0.3 6.1.2 (two patch releases of cleanup on top of the 6.1.0 findKeysPaged API that the 3.1.0 sessionstorage OOM fix relies on). Multiple updates from translatewiki.net.
  • girishG

    Minecraft - Package Updates

    Pinned Locked Minecraft
    211
    0 Votes
    211 Posts
    176k Views
    Package UpdatesP
    [2.37.12] Update bedrock to 1.26.23.1
  • girishG

    Metabase - Package Updates

    Pinned Locked Metabase
    567
    1 Votes
    567 Posts
    560k Views
    Package UpdatesP
    [3.12.5] Update metabase to 0.61.2.6 Full Changelog
  • nebulonN

    Baserow - Package Updates

    Pinned Locked Baserow
    115
    2 Votes
    115 Posts
    46k Views
    Package UpdatesP
    [1.37.11] Update uv to 0.11.16
  • girishG

    n8n - Package Updates

    Pinned Locked N8N
    444
    0 Votes
    444 Posts
    511k Views
    Package UpdatesP
    [4.24.0] Update n8n to 2.21.7 Full Changelog core: Acquire expression isolate for scheduled polls (#30742) (6167d4a) core: Validate non-empty prompts in AI vendor nodes before API calls (#30820) (15d0dbb) core: Preserve nested arrays in VM expression engine output (#30333) (f5698a1) core: Introduce native Python code tool for AI agent (#22595) (763b858) core: Add new Chat hub feature for chatting with LLMs and your n8n agent workflows (#23035) (fa1c87f) Google Gemini Node: Introduce built-in Gemini tools (#22454) (f830447) Jira Node: Add OAuth2 (3LO) support (#29414) (4d5bafc) Schedule Node: Fix hourly intervals that don't divide evenly into 24h (#29778) (1a22c76) Figma Trigger Node: Add OAuth2 authentication support (#30079) (e3e70d6) Snowflake Node: Fix issue with Insert and Update operations not working (#29339) (4c369e8)
  • S

    Installation ID?

    Grist
    2
    0 Votes
    2 Posts
    35 Views
    jamesJ
    Hello @superhua Currently, the @grist app for Cloudron does not come with the enterprise option. We will need to look into that again, see https://forum.cloudron.io/post/124882
  • timconsidineT

    BarDock - minimal app switcher for Mac

    Off-topic
    6
    2
    8 Votes
    6 Posts
    264 Views
    robiR
    @timconsidine Yay works!
  • L

    How to Setup LinkStack on Cloudron

    Discuss linkstack linktree littlelink tutorial custom-apps
    15
    5 Votes
    15 Posts
    2k Views
    jdaviescoatesJ
    I just tried them too - so easy! Can literally copy paste it all as is and then it's done! @gengar
  • marcusquinnM

    Anytype (finally) released for public beta

    Moved App Wishlist
    41
    14
    22 Votes
    41 Posts
    26k Views
    C
    It would be amazing to have AnyType on Cloudron!
  • SansGuidonS

    Is anyone still using Ackee on Cloudron?

    Ackee
    3
    2 Votes
    3 Posts
    365 Views
    J
    @oneinterweb you have to change the credentials in /app/data/env ACKEE_USERNAME=admin ACKEE_PASSWORD=supersecret This works fine.
  • G

    Bug Report - UI inconsistensy on custom Udp Port

    Moved Solved Support
    8
    1 Votes
    8 Posts
    137 Views
    nebulonN
    Great catch! This is fixed for the next release with https://git.cloudron.io/platform/box/-/commit/5e2b531d9bc4fc180395b58c704b1ee083b0aa5f
  • L

    Cloudron update recreated docker cloudron network causing database connectivity issues for all apps

    Solved Support nft iptables
    16
    1 Votes
    16 Posts
    568 Views
    L
    @joseph thank you so much! What a wild ride this was - I found the smoking gun by checking package manager logs: On 2026-03-29 21:23:20 I installed prometheus-node-exporter to ship metrics to my Grafana monitoring stack - apparently the workflow also installed iptables-persistent which installed netfilter-persistent as a dependency. why, I don't know - but lesson learned.
  • D

    Can we add a pdf-engine to the installed pandoc?

    N8N
    5
    1 Votes
    5 Posts
    202 Views
    girishG
    @dcwalk I already added that package - https://git.cloudron.io/packages/n8n-app/-/commit/011e4e46090dc467aef8e24bbd8b75932bd0f0f1 . Are we missing something else?
  • B

    Version info not accurate

    PeerTube
    3
    2 Votes
    3 Posts
    45 Views
    J
    https://git.cloudron.io/packages/peertube-app/-/merge_requests/32/diffs?commit_id=6f91a2b38f91fd6d816939194f7ff90d000b2169 will fix the version back.
  • girishG

    Mattermost - Package Updates

    Pinned Locked Mattermost
    205
    0 Votes
    205 Posts
    176k Views
    Package UpdatesP
    [1.28.1] Update mattermost to 11.7.1 Full Changelog