Release history
Element Web 1.12.32
Element Web 1.12.32 closes security flaws in NEB starter links and guest access tokens that could leak sensitive data
Element Web 1.12.32
Removes support for NEB starter links in messages, closing a spoofing/abuse vector. No action needed beyond updating
Element Web 1.12.31
Device verification can no longer be skipped; Expect a changed first-login flow for new devices
Element Web 1.12.31-rc.1
RC removes the default option to skip device verification, tightening the out-of-box E2E security posture
Element Web 1.12.31-rc.0
Disables skipping device verification, tightening the default security posture for new sessions
Element Web 1.12.30
Removes legacy Module and Customisation API
Element Web 2.1.1
Fix banner module's logo href not working in Univention mode
Element Web 1.12.30-rc.1
Removes legacy Module and Customisation API
Element Web 2.1.0
Element Web 2.1.0 adds Module API v2 compatibility for plugin developers
Element Web 1.12.28
Desktop releases now require glibc 2.34
Element Web 2.0.0
Tweak Banner module styling
Element Web 1.12.28-rc.1
Rc.1 adds public room warnings, upload analytics, URL preview module API, and reorganized room list sections while requiring glibc 2.35 minimum
Element Web 1.12.27
Updated URL preview implementation to patch security vulnerability, plus UI improvements for room lists, composer, and notification handling
Element Web 1.12.27-rc.1
URL preview implementation updated to reflect spec changes, knock events now render in notifications, and unread state re-evaluates when messages decrypt
Element Web 1.12.27-rc.0
Rc.0 updates URL preview handling per MSC changes and adds module API for user verification certificate authorities
Element Web 1.12.26
Custom user status, registration rate-limit notifications, and RTC transport discovery for widgets shipped alongside UI refinements and bug fixes
Element Web 1.12.26-rc.0
Custom user status, registration rate-limit warnings, and RTC transport discovery for widgets shipped alongside UI refinements and bug fixes
Element Web 1.12.25
Removes MSC3391 and MSC3852 support
Element Web 1.12.24
Add config option to disable client wellknown fetch, improving privacy for self-hosted deployments that don't require homeserver discovery
Element Web 1.12.24-rc.1
Add config option to disable client wellknown fetch, improving privacy for self-hosted deployments
Element Web 1.12.21
Device verification nudges and recent emoji support shipped, improving security posture and chat experience
Element Web 1.12.19
Element Web 1.12.19 removes MSC3215 report-to-moderators feature, adds module API for custom file uploads, and improves call notifications and UI