Joplin Server Updates & Release Notes

Name: Joplin Server
Brand: Joplin

Follow Joplin Server to add their release notes to your feed!

14 updates curated from 1 source by the Releasebot Team. Last updated: Sep 8, 2026

Get this feed:

Sep 7, 2026
Date parsed from source:
Sep 7, 2026

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.7.2

Joplin Server adds security hardening, login and sharing improvements, better search and admin controls, plus fixes for database locks, LDAP, publishing, and orphaned items.
New

Add OrphanTrace logging to investigate orphaned items bug (#15709)

Improved

Allow configuring the default admin password with an environment variable (#15655 by @personalizedrefrigerator)

Allow searching emails by full name or email (8d90057)

Display JSB banner on larger Joplin Server instances (#16255)

Don't include dev dependencies in the built image (#15472) (#15432 by @personalizedrefrigerator)

Enforce session and CSRF checks on the application authorisation POST (#16270)

Give focus to MFA field when it is displayed (380401c)

Harden user-content responses against XSS via uploaded resources (#15787)

Hardening: Disable the proto property (#15765 by @personalizedrefrigerator)

Improve UUID generation logic (#15656 by @personalizedrefrigerator)

Improve items/ route validation logic (#15657 by @personalizedrefrigerator)

Improve logging for shared notebook maintenance (#16400)

Make LDAP login logic safer (#15707 by @personalizedrefrigerator)

Prevent SAML login from accessing existing local password accounts (#15647)

Prevent pending share recipients from writing items into shared folders before accepting the invitation (dff533c)

Publishing an old note may display an error "Missing property deleted_time" (#16175) (#16132 by @Rygaa)

Record which app screen a Joplin Cloud sign-up started from (b5ed2c9)

Reject items with a null byte in any field (#15489)

Scope password-reset tokens to their intended purpose (#16274)

Silence Katex warnings (#15839)

Speed up batch deletes by using whereIn instead of OR chains (#15705)

Upgrade samlify to v2.13.1 (#15658 by @personalizedrefrigerator)

Validate transcribe job ID to prevent path traversal in proxy endpoint (d97a509)

Fixed

Allow SVG resources to be served inline (#15814) (#15802)

Auto-unlock database after failed server migration (#15509) (#15507)

Fix "password has not been changed" warning not shown in some cases where it should be (#15747 by @personalizedrefrigerator)

Fix Fountain rendering issue (#15659 by @personalizedrefrigerator)

Fix LDAP user auto-creation (#15847) (#15725 by @personalizedrefrigerator)

Fix SQLite database getting permanently locked (#16244) (#15226 by @ivan)

Fix orphaned items task timing out on large databases (#15704)

Fixed LDAP connection leak when login exits early (#15855) (#15857 by @tillo)

Fixed published notes reusing disabled owner shares (#15454) (#15373 by @Rygaa)

Original source
May 18, 2026
Date parsed from source:
May 18, 2026

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.7.1

Joplin Server adds a SAML auth code rate limiter, improves sync item deletion and update performance, and fixes an XSS vulnerability, database pool issues, Windows static asset paths, banner handling, oversized emails, and downgrade startup failures.
New

Add rate limiter on SAML auth code endpoint (#15433)

Improved

Joplin Server/Cloud sync: Improve item deletion performance (#15392 by @personalizedrefrigerator)

Performance: Store update changes per-user, rather than per-item (#14712 by @personalizedrefrigerator)

Fixed

Fix XSS vulnerability in HTML notes (#15435)

Fix banner handling (51637d6)

Fix conditions for sending oversized account emails (#15271 by @personalizedrefrigerator)

Fix database connection pool corruption after transaction failures (e7631bc)

Fix database connection pool corruption when processing orphaned items (2f4f0a5)

Fix startup can fail after downgrading if an interrupted task no longer exists (#15301 by @personalizedrefrigerator)

Static asset resolution fails on Windows due to backslash path separators (#15396) (#15395 by @Rygaa)

Original source
All of your release notes in one feed

Join Releasebot and get updates from Joplin and hundreds of other software products.

Create account
Get updates with:
Apr 20, 2026
Date parsed from source:
Apr 20, 2026

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.6.1

Joplin Server adds MFA support and delivers a broad stability and performance update, with improved sync, sharing, file handling, and task reliability, plus multiple bug fixes and package updates.
New

Add support for MFA (#14081)

Improved

Downgrade password reset log for non-existent users to info (#15139)

Downgrade unsupported image format log to info level (02d9222)

Improve name generation for uploaded files (#14392 by @personalizedrefrigerator)

Move deletion of objects outside of transaction block (#14898)

Optimize orphaned items query using NOT EXISTS (#15138)

Performance: Improve performance of share maintenance task (#14484 by @personalizedrefrigerator)

Remove support for DELTA_INCLUDES_ITEMS (#14393 by @personalizedrefrigerator)

Updated packages @rollup/plugin-commonjs (v28.0.9), @rollup/plugin-node-resolve (v16.0.3), @rollup/plugin-replace (v6.0.3), dayjs (v1.11.19), form-data (v4.0.5), fs-extra (v11.3.3), glob (v11.1.0), katex (v0.16.23), ldapts (v8.0.36), qrcode (v1.5.4), rate-limiter-flexible (v7.4.0), raw-body (v3.0.2), react (v19.1.5), samlify (v2.10.2), sass (v1.95.1), sharp (v0.34.5), short-uuid (v5), style-to-js (v1.1.21), turndown (v7.2.2)

Fixed

Admin emails sorting fails due to invalid user_id column (#14399) (#14355 by @devanmolx)

Allow changing the password for the admin account when SAML is enabled (#14135) (#14131 by @personalizedrefrigerator)

Fix certain note content is corrupted when uploaded to the server (#14379) (#14343 by @personalizedrefrigerator)

Fix delta API can return changes in wrong order (#14713 by @personalizedrefrigerator)

Fix new clients on an existing account can download previously unshared items (#14289) (#14110 by @personalizedrefrigerator)

Fix savepoint not being rolled back on unique constraint errors during sync (#15140)

Fix share processing task failure (#14795 by @personalizedrefrigerator)

Fix tasks getting permanently stuck after database errors (#15137)

Fix user can incorrectly retain access to shared items in some cases (#14438 by @personalizedrefrigerator)

Fix user can incorrectly retain access to shared items in some cases (#14445 by @personalizedrefrigerator)

Fix warning when unsharing folder (#14134) (#14107 by @personalizedrefrigerator)

Fixed heartbeat task hanging (#15136)

Redirect to correct share when following links between independently published notes (#14963) (#583 by @Rygaa)

Remove warning logged on first startup (#14401) (#14384 by @yugalkaushik)

Update item ownership information when the original owner no longer has access (#14469) (#14107 by @personalizedrefrigerator)

Original source
Dec 19, 2025
Date parsed from source:
Dec 19, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.5.2

Joplin Server improves shared item handling, archived backup cleanup, package updates, and a clearer published note sync error.

Improved: Ensure that shared items are processed in the correct order (#13858 by @personalizedrefrigerator)

Improved: Periodically delete old backups for archived accounts (#13741 by @personalizedrefrigerator)

Improved: Updated packages fs-extra (v11.3.2), mermaid (v11.10.1), sharp (v0.34.4)

Fixed: Confusing error message if a published note has not been synced to the server (#13059)
Original source
Dec 3, 2025
Date parsed from source:
Dec 3, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.5.1

Joplin Server adds SAML login and session handling improvements, including support for DELETE_EXPIRED_SESSIONS_SCHEDULE, better error handling, publishing and sharing notebooks for SAML users, logging and database tuning, performance boosts, Node.js 24 upgrade, and multiple fixes.
New

Add support for DELETE_EXPIRED_SESSIONS_SCHEDULE to prevent auto-logout when using SAML login (ae289be)

Improved

Add LOG_LEVEL env var to control logging verbosity (#13503) (#13147 by @bartolomeo)

Database: Adjust connection pool configuration, make connection pool size configurable (#13681 by @personalizedrefrigerator)

Enable publish and share notebook for SAML login (defe36b)

Improve SAML login error handling and add doc regarding email and displayName attributes (98effef)

Improve error message when font file cannot be loaded (#13682 by @personalizedrefrigerator)

Improve error when attempting to load certain routes that do not exist (#13683 by @personalizedrefrigerator)

Optimise delta query (#13650)

Optimise delta sub-query (#13633)

Performance: Improve performance of requests-per-minute logger (#13670 by @personalizedrefrigerator)

Performance: Improve performance of updating shared items, generating reports (#13674 by @personalizedrefrigerator)

Remove query optimisation that now seems to be slower with newer versions of Postgres (66fa3fc)

SAML users cannot modify their own profile at all (#13378) (#13369)

Save and query less data when creating and updating items (#13739 by @personalizedrefrigerator)

Slightly improve delta performance (#13730 by @personalizedrefrigerator)

Update @aws-sdk/client-s3 to v3.928.0 (#13673 by @saturneric)

Updated packages @adobe/css-tools (v4.4.4), dayjs (v1.11.18), follow-redirects (v1.15.11), form-data (v4.0.4), koa (v2.16.2), ldapts (v8.0.9), mermaid (v11.9.0), pg (v8.16.3), rate-limiter-flexible (v7.2.0), raw-body (v3.0.1), samlify (v2.10.1), sharp (v0.34.3), turndown (v7.2.1)

Upgrade NodeJS to v24 (#13701 by @personalizedrefrigerator)

Upgrade koa to v2.16.3 (#13626 by @personalizedrefrigerator)

Fixed

Cannot login with SAML when already logged in on the browser (#13368)

Fix items can be incorrectly unshared on conflicting update (#13691) (#13686 by @personalizedrefrigerator)

Fix password fields are always disabled (#13401) (#13400 by @personalizedrefrigerator)

Fix report service fails when there are a very large number of items to be processed (#13721 by @personalizedrefrigerator)

Fix slow delta queries (#13639)

Make server less likely to generate non-unique SSO codes (#13501) (#13490 by @personalizedrefrigerator)

Original source
Similar to Joplin Server with recent updates:
Sep 25, 2025
Date parsed from source:
Sep 25, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.4.4

Joplin Server improves SAML and LDAP login, adds request logging, and updates packages for stronger security and debugging.

Improved: Clean-up SAML login section (4cb6b01)

Improved: Pin pm2-logrotate version to prevent supply chain attacks (#13235)

Improved: Provide more logging information for each request to help debugging issues (1ef8fd5)

Improved: Updated packages @rollup/plugin-commonjs (v28.0.6), form-data (v4.0.3), glob (v11.0.3), node-mocks-http (v1.17.2), pg (v8.16.2), sass (v1.93.0), style-to-js (v1.1.17)

Improved: Use "lax" cookies when using external authentication like SAML or LDAP (6705712)
Original source
Sep 9, 2025
Date parsed from source:
Sep 9, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.4.3

Joplin Server improves closed-environment startup, updates key packages, and fixes concurrency and Transcribe error handling.
Improved

Remove the need to install pm2-logrotate on startup so that image can work in a closed environment (#13149)

Updated packages pg (v8.15.6), sass (v1.87.0), sharp (v0.34.2)

Fixed

Fix unique constraint error when multiple createSharedFolderUserItems are run concurrently (#13112 by @personalizedrefrigerator)

Improve handling of concurrent deletion requests for the same item (#13092) (#12984 by @personalizedrefrigerator)

Not handling correctly non JSON error responses from Transcribe (#12986) (#12983 by @pedr)

Original source
Aug 18, 2025
Date parsed from source:
Aug 18, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.4.2

Joplin Server adds transcribe functionality, improves request parsing resilience and updates key packages. It also fixes shared notebooks after permanent deletion, a broken expired auth code task, a migration naming issue and SAML callback CORS handling.

New

Add transcribe functionality (#12670 by @pedr)

Improved

Trying to fix a request parsing error that can potentially crash the server (#12860)

Updated packages @adobe/css-tools (v4.4.3), bulma (v1.0.4), glob (v11.0.2), jsdom (v26.1.0), ldapts (v7.4.0), mermaid (v11.6.0), sharp (v0.34.1)

Fixed

Fix notebooks remain shared after being permanently deleted by the share owner (#12583 by @personalizedrefrigerator)

Fixed broken "Delete expired authentication codes" task (#12737)

Fixed incorrectly named database migration that prevents new migrations from being applied (91b0ea6)

Skip CORS check for SAML callback (#12948 by @yuudi)
Original source
Jul 17, 2025
Date parsed from source:
Jul 17, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.4.1

Joplin Server adds SAML support and StorageDriverS3 endpoint configuration, improves share writability and description list styling, and updates key packages. It also fixes PM2 log buildup in the image container and includes a SAML security update.
New

Add Joplin Server SAML support (#11865 by @ttcchhmm)

Added endpoint configuration for StorageDriverS3 (#12032 by @forsaken628)

Improved

Add CSS style for description list elements (#12158) (#12138 by @pedr)

Ensure shares are writable (#12651)

Updated packages @adobe/css-tools (v4.4.2), @rollup/plugin-commonjs (v28.0.3), @rollup/plugin-node-resolve (v16.0.1), @rollup/plugin-replace (v6.0.2), bulma (v1.0.3), dayjs (v1.11.13), domutils (v3.2.2), form-data (v4.0.2), glob (v11.0.1), highlight.js (v11.11.1), jsdom (v25), katex (v0.16.22), koa (v2.16.1), ldapts (v7.3.3), license-checker-rseidelsohn (v4.4.2), mermaid (v11.4.1), nanoid (v3.3.9), node (v18.20.7), node-mocks-http (v1.16.2), nodemailer (v6.10.1), pg (v8.14.1), pm2 (v5.4.3), rate-limiter-flexible (v5.0.5), raw-body (v3), react, sass (v1.86.3), sharp (v0.33.5), standard (v17.1.2), style-to-js (v1.1.16), tesseract.js (v5.1.1), uuid (v11.1.0)

Fixed

Prevent PM2 logs from accumulating in the image container (#12723) (#12721)

Security

SAML: Update samlify to v2.10.0 (#12371 by @personalizedrefrigerator)

Original source
Mar 30, 2025
Date parsed from source:
Mar 30, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.3.13

Joplin Server improves Docker image support, adds social links, boosts ARM64 builds and fixes dark theme readability.

Improved: Buildx support for Docker images (#11582 by @redrathnure)

New: Added links to social networks (04fc634)

Improved: Joplin Server Docker image for ARM64 (#12030)

Fixed: Disable faulty dark theme to prevent published notes from being unreadable (#11910)
Original source
Mar 3, 2025
Date parsed from source:
Mar 3, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.3.4

Joplin Server improves default route request validation to strengthen security and fix CVE-2025-27409.

Security

Improve request validation in default route (#11916 by @personalizedrefrigerator) (CVE-2025-27409 discovered by @zonia3000)
Original source
Feb 23, 2025
Date parsed from source:
Feb 23, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.3.3

Joplin Server fixes a security patching issue in user properties.

Security

Fixed patching user properties (12baa98) (CVE-2025-27134 discovered by @zonia3000)
Original source
Feb 19, 2025
Date parsed from source:
Feb 19, 2025

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.3.2

Joplin Server improves sharing logging, adds cleanup for old events, allows self-signed certificates for LDAP auth, and speeds up delta sync queries. It also updates key packages, moves to Node 18 bookworm, and fixes a PostgreSQL version check on Windows Server.
New

Add logging statement to evaluate the performance of the sharing service (1d6c1e4)

Added more logging for sharing (2779a9c)

Improved

Add task to delete events older than a week (#11372) (#9931 by Adrien Poupa)

Allow self-signed certificate for ldap auth (#11531 by Ryan Crisanti)

Optimise delta sync queries by optimising the underlying SQL query (4df0b9f)

Updated packages @adobe/css-tools (v4.4.1), @rollup/plugin-commonjs (v25.0.8), @rollup/plugin-node-resolve (v15.2.4), @rollup/plugin-replace (v5.0.7), adm-zip (v0.5.16), async-mutex (v0.5.0), bulma (v1.0.2), compare-versions (v6.1.1), dayjs (v1.11.12), glob (v10.4.5), highlight.js (v11.10.0), jsdom (v24.1.1), katex (v0.16.11), koa (v2.15.3), ldapts (v7.1.0), markdown-it-ins (v4), markdown-it-sup (v2), node-mocks-http (v1.15.1), nodemailer (v6.9.14), pg (v8.12.0), pm2 (v5.4.2), rate-limiter-flexible (v5.0.3), react, sass (v1.77.8), sharp (v0.33.4), tesseract.js (v5.1.0), turndown (v7.2.0)

Use node: 18 (bookworm) instead node:18-bullseye (#11554 by @redrathnure)

Fixed

Fix PostgreSQL version check failing on Windows Server because wrong regex (#11038) (#10532 by @pedr)

Original source
Jul 25, 2024
Date parsed from source:
Jul 25, 2024

First seen by Releasebot:
Sep 8, 2026
Joplin Server by Joplin

server-v3.0.1

Joplin Server adds Postgres replication, a new report page, and uploaded data size reporting, while improving web client sync, report queries, logging, and database performance for larger datasets.

New

New: Add support for Postgres replication (a90e3e0)

New: Add uploaded data size to report (e9e6d8a)

New: Added report page (7ad3b34)

Improved

Improved: Allow web client sync (#10775 by @personalizedrefrigerator)

Improved: Avoid logging automated resource deletions (#10157 by @personalizedrefrigerator)

Improved: Decrease maximum email and full_name sizes (#10303 by @personalizedrefrigerator)

Improved: Improve log quality by increasing specificity of error (#10287 by @pedr)

Improved: Optimize delta change query to prevent timeouts on large datasets (89dfbe3)

Improved: Prevent item size calculation task from failing when a user has been deleted (e6ec27a)

Improved: Print a heartbeat message to log once per minute (916fa39)

Improved: Updated packages @adobe/css-tools (v4.3.3), async-mutex (v0.4.1), chokidar (v3.6.0), follow-redirects (v1.15.6), glob (v10.3.12), jsdom (v23.2.0), koa (v2.15.2), ldapts (v7.0.9), moment (v2.30.1), node-mocks-http (v1.14.1), nodemailer (v6.9.8), pg (v8.11.5), pm2 (v5.3.1), react, sass (v1.71.0), sharp (v0.33.3), style-to-js (v1.1.12), tar (v6.2.1), tesseract.js (v5.0.5), turndown (v7.1.3)

Improved: Use slave database for reports (cd0ff94)

Fixed

Fixed: Missing record validation before trying to add item to user (#10471) (#10118 by @pedr)
Original source

This is the end. You've seen all the release notes in this feed!

Curated by the Releasebot team

Releasebot is an aggregator of official product update announcements from hundreds of software vendors and thousands of sources.

Our editorial process involves the manual review and audit of release notes procured with the help of automated systems.

About us Our methodology

Joplin Server Updates & Release Notes

server-v3.7.2

New

Improved

Fixed

server-v3.7.1

New

Improved

Fixed

server-v3.6.1

New

Improved

Fixed

server-v3.5.2

server-v3.5.1

New

Improved

Fixed

Similar to Joplin Server with recent updates:

server-v3.4.4

server-v3.4.3

Improved

Fixed

server-v3.4.2

New

Improved

Fixed

server-v3.4.1

New

Improved

Fixed

Security

server-v3.3.13

Improved: Buildx support for Docker images (#11582 by @redrathnure)

Improved: Joplin Server Docker image for ARM64 (#12030)

Fixed: Disable faulty dark theme to prevent published notes from being unreadable (#11910)

server-v3.3.4

Security

server-v3.3.3

Security

server-v3.3.2

New

Improved

Fixed

server-v3.0.1

New

Improved

Fixed

Curated by the Releasebot team