Skip to content

flowkraft/datapallas

v15.1.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

analytics business-intelligence chat2db crystal-reports dashboards data-exploration
+7 more
data-visualization jasperreports qlik reporting self-hosted tableau text2sql

Affected surfaces

auth

Summary

AI summary

Added a REST API for core operations, visual Data Canvas builder, Cube semantic layer, and encrypted passwords at rest.

Full changelog

Added

  • REST API for integration and automation — All core operations (burst, generate, merge, license, connections) are now available as REST endpoints. Integrate DataPallas into your workflows, CI/CD pipelines, or custom applications using simple HTTP calls. Interactive documentation available at /swagger-ui.html when the server is running.

  • CLI and REST API documentation — New documentation pages with ready-to-run examples for both the command line interface and REST API.

  • Explore Data Canvas — Introduces a visual drag-and-drop canvas for building interactive data views and dashboards with charts, tables, pivot tables, and filters — all in one unified workspace.

  • Cube semantic layer — Define dimensions, measures, and joins over your database tables in a reusable semantic layer. Cubes power queries across Data Canvas, dashboards, and reports, giving you a single source of truth for your business metrics.

Changed

  • Product rebranded to DataPallas — The product is now named DataPallas. All user-facing names, labels, splash screens, and the desktop executable (DataPallas.exe) reflect the new identity.

  • In-process job execution — Burst, generate, and merge operations now run inside the server process instead of spawning a separate JVM via reportburster.bat. This eliminates the 2-3 second JVM startup overhead per job and provides more reliable status bar feedback.

  • Passwords encrypted at rest — Database, email, and SMS passwords are now encrypted on disk (AES-256-GCM) and decrypted only at the exact moment they are needed (SMTP connect, JDBC connect, Twilio call), then cleared from memory immediately after.

Security Fixes

  • Passwords (database, email, SMS) now encrypted at rest using AES-256-GCM with in‑memory zeroization after use

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track flowkraft/datapallas

Get notified when new releases ship.

Sign up free

About flowkraft/datapallas

All releases →

Related context

Beta — feedback welcome: [email protected]