convoy

v26.6.5 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 10d Alerting & Incidents

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

angular api-gateway automation cli cloud convoy

+12 more

developer-tools devtools gateway gateways go incoming-webhooks infrastructure outgoing-webhooks webhook-gateway webhook-service webhooks webhooks-server

Affected surfaces

auth

Summary

AI summary

Updates Bug Fixes, dataplane, and dashboard across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Requires authentication for SSO admin portal in controlplane. Requires authentication for SSO admin portal in controlplane. Source: llm_adapter@2026-07-16 Confidence: high	—
Feature	Low	Adds configurable outbound request ID header per project in dataplane and dashboard. Adds configurable outbound request ID header per project in dataplane and dashboard. Source: llm_adapter@2026-07-16 Confidence: high	—
Bugfix	Medium	Fixes delete retention attempts by delivery cutoff in dataplane. Fixes delete retention attempts by delivery cutoff in dataplane. Source: llm_adapter@2026-07-16 Confidence: high	—

Full changelog

What's Changed

Features

feat(dataplane,dashboard): configurable outbound request ID header per project by @mekilis in https://github.com/frain-dev/convoy/pull/2665

Bug Fixes

fix(dataplane): delete retention attempts by delivery cutoff by @mekilis in https://github.com/frain-dev/convoy/pull/2718
fix(controlplane): require auth for SSO admin portal by @mekilis in https://github.com/frain-dev/convoy/pull/2719
chore(release): prepare v26.6.5 by @mekilis in https://github.com/frain-dev/convoy/pull/2720
chore(release): include #2665 in v26.6.5 changelog by @mekilis in https://github.com/frain-dev/convoy/commit/69c603877afc5a337d952d52fb1f508a94fbb7ff

Full Changelog: https://github.com/frain-dev/convoy/compare/v26.6.4...v26.6.5

Security Fixes

Require authentication for SSO admin portal

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track convoy

Get notified when new releases ship.

About convoy

The Cloud Native Webhooks Gateway

All releases →