After 31 December 2026 the 1.x line reaches end of life and will receive no further releases, including security fixes.

Nothing other than critical fixes is backported to 1.8.x, and there are no further feature releases planned for that line. If you are running 1.x, you can upgrade to 2.x today — see the upgrade guide.

Please use our website for security issues that affect our project. If you believe you have found a vulnerability, please disclose it via our website. You can also disclose security issues by mailing security@flarum.org.

Any submitted security issue will be checked thoroughly by our development team. A fix for the issue and a transparent information on GitHub about the issue existing will be released. You can view any previously identified issues on our GitHub Security Page. New major versions of Flarum will also receive a security audit to verify our efforts on providing a secure application.