Linkwarden 2.17 fixes moderate-severity holes, and a password change signs out every other device
Linkwarden 2.17.0, published on 10 November, fixes a number of moderate-severity security issues with no CVE list attached, so updating is the whole action. It also signs out every other device and revokes access tokens when a password changes, limits repeated wrong passwords to one attempt every 25 seconds, makes drag-order the default sort, and lets self-hosters replace the AI tagging prompts.