It is basically the same vulnerability exploited with a different socket call. The initial fix in 2.6.1 only prevented a specific case, the fix in 2.8.1 should cover all cases.
You can either upgrade to 2.8.1 or only get the changes from the specific commit.
Dropping support for nodejs 14 in NodeBB 3.x
-
We will be dropping support for nodejs 14.x in nodebb 3.x.
Nodejs 14 will be out of maintenance in april 2023 and some of our dependencies no longer support it.
You can see nodejs release schedule here https://github.com/nodejs/release#release-schedule
