Download Latest Version v4.19.1 source code.zip (114.1 MB) Google Add to Preferred Sources
Home / v4.19.1
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-10-24 1.1 kB
0
v4.19.1 source code.tar.gz 2026-10-24 108.7 MB
0
v4.19.1 source code.zip 2026-10-24 114.1 MB
2 2 weekly downloads
Totals: 3 Items   222.8 MB 2

Changelog

The Node.js vulnerabilities (notably CVE-2026-111497) did not affect Chatwoot’s production runtime. Node.js is used only to precompile JavaScript assets in the build step; the production application runs on Ruby and does not run Nodejs. We have nevertheless upgraded Node.js as a precaution.

We recommend upgrading to v4.19.1 for the latest security fixes and hardening improvements.

  • Updated Node.js to the 24.22.1 security release.
  • Hardened Twilio webhook verification and CSS sanitization.
  • Added business hours and withheld caller ID support for Twilio calls. [Enterprise]
  • Improved WhatsApp campaign recovery and duplicate-send protection. [Enterprise]
  • Added SAML metadata URL support with certificate refresh. [Enterprise]
  • Updated Captain AI and transcription models. [Enterprise]
  • Added Stripe and auto-translation to paid Cloud plan entitlements.
  • Fixed duplicate Help Center articles and conflicting inbox bots.
  • Removed unnecessary session cookies from public pages.

Thanks to @xamimran for the contributions.

Source: README.md, updated 2026-10-24