chartbrew

v5.2.1 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 1mo Dashboards & Visualization

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs

Topics

analytics api chartjs charts web data-visualization

+11 more

firebase firebase-firestore firestore mongodb mysql nodejs postgresql react reactjs realtime-database redux

Affected surfaces

rce_ssrf deps

ReleasePort's take

Moderate signal

editorial:auto 1mo

Release v5.2.1 patches a critical MySQL connection vulnerability and hardens SSRF filtering against NAT64/DNS64 addresses.

Why it matters: The MySQL security patch (severity 90) eliminates special‑elements neutralization flaws; the SSRF guard blocks exploitable NAT64/DNS64 outbound requests (severity 80).

Summary

AI summary

Updates 🐛 Bug fixes, 🔒 Security fixes, and ⬆️ Dependencies updates across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	Critical	Patches special elements neutralization for MySQL connections Patches special elements neutralization for MySQL connections Source: llm_adapter@2026-06-14 Confidence: high	—
Security	High	Blocks NAT64/DNS64 addresses in outbound SSRF guard Blocks NAT64/DNS64 addresses in outbound SSRF guard Source: llm_adapter@2026-06-14 Confidence: high	—
Dependency	Low	Updated heroui to improve soft background contrast across the app Updated heroui to improve soft background contrast across the app Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	Fixes dataset list not updating when switching teams Fixes dataset list not updating when switching teams Source: llm_adapter@2026-06-14 Confidence: high	—
Bugfix	Medium	Fixes issues with Jira builder filters Fixes issues with Jira builder filters Source: llm_adapter@2026-06-14 Confidence: high	—

Full changelog

Changelog

🐛 Bug fixes

fixed issue with the dataset list not updating properly when switching teams
few fixes with the jira builder filters

🔒 Security fixes

patched special elements neutralization for mysql-based connections
block NAT64/DNS64 addresses in outbound SSRF guard

⬆️ Dependencies updates

updated heroui to improve soft background contrast across the app

Security Fixes

Patched special elements neutralization for MySQL-based connections
Blocked NAT64/DNS64 addresses in outbound SSRF guard

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track chartbrew

Get notified when new releases ship.

About chartbrew

Open-source reporting platform to build and share live dashboards from APIs, SQL and NoSQL databases, with powerful AI assistant, scheduling, and embeddable charts

All releases →