Rocket.Chat
9.0.0Interoperable by design. Governed by you. Open-source, secure platform for messaging, voice, video and governed AI, built for defense and government.
- Maintenance
- Active1087 commits in 3 months · bus factor 4
- License
- OtherUnknown
- Security
- 21 advisories4 critical, 8 high, 6 medium, 3 low · Scorecard 8.7/10
- Supported versions
- No scheduleendoflife.date does not track this project
46.5k stars · 14.2k forks · 4.4k open issues · last release 4 days ago · data checked 1 hour ago
Breaking changes
What to check before upgrading, taken from the notes of the last 30 releases.
- 9.0.0Nov 10, 2026
- > ⚠️ Authentication changes in Rocket.Chat 9.0.0
Release history
All releases on GitHubAtom feed/feed/RocketChat/Rocket.Chat
Badge
[](/p/RocketChat/Rocket.Chat)
Engine versions
- Node:
22.22.3 || 22.23.4 - Deno:
2.3.1 - MongoDB:
8.0 - Apps-Engine:
1.65.1
Patch Changes
- (#43441 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
- Bump @rocket.chat/meteor version.
- Bump @rocket.chat/meteor version.
- (#43409 by @dionisio-bot) Security Hotfix (https://docs.rocket.chat/docs/security-fixes-and-updates)
- (#43400 by @dionisio-bot) Bump the Node.js base image of the Docker images to 22.23.4 (the Debian image moves from bullseye to bookworm), which fixes a Brotli decoder out-of-bounds write (CVE-2026-111497).
- (#43446 by @dionisio-bot) Fixes app slash commands that declare a permission being listed and executed for users without that permission
- (#43405 by @dionisio-bot) Fixes a permission check in team member management
- Updated dependencies []:
- @rocket.chat/core-typings@8.7.2
- @rocket.chat/rest-typings@8.7.2