Skip to content

NodeDB

v0.4.0 Security

This release includes 4 security fixes for security teams reviewing exposed deployments.

Published 5d NoSQL & Document
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 4 known CVEs

Topics

agent-memory ai-agents columnar crdt database distributed
+13 more
edge embedded graph kv-store local local-first multi-model nosql offline-first llm sql timeseries vector

Affected surfaces

auth rbac

Summary

AI summary

Updates pgwire, server, and fix across a mixed release.

Full changelog

What's Changed

  • fix(server): source server_version from CARGO_PKG_VERSION by @mkhairi in https://github.com/NodeDB-Lab/nodedb/pull/114
  • Vector multi-dtype storage, SQL CREATE INDEX, and physical plan refactor by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/115
  • fix: gate Linux-only runtime paths by @habibtalib in https://github.com/NodeDB-Lab/nodedb/pull/128
  • fix(tenant): accept tenant name in DROP/ALTER/PURGE TENANT by @emanzx in https://github.com/NodeDB-Lab/nodedb/pull/132
  • feat: add temporal query support across engines by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/144
  • Fix tenant drop ghost rows and id allocation race by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/145
  • docs: update for transactions, distributed execution, and protocol changes by @laksamanakeris in https://github.com/NodeDB-Lab/nodedb/pull/174
  • fix(security): enforce SQL authorization across transports by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/177
  • fix(security): preserve credential integrity across auth lifecycle by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/178
  • fix(security): bind OIDC providers to trusted tenants by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/179
  • fix(security): prevent external superuser assertions by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/180
  • fix(security): preserve UTF-8 SQL parser offsets by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/181
  • fix(control): native gateway session txn_id for in-txn SQL reads by @pizofreude in https://github.com/NodeDB-Lab/nodedb/pull/182
  • docs: cover v0.4.0 — atomic cross-shard transactions, CRDT collections, sparse vectors by @laksamanakeris in https://github.com/NodeDB-Lab/nodedb/pull/183
  • fix(pgwire): improve libpq and ActiveRecord compatibility by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/184
  • fix(pgwire): bypass cache for data-dependent point plans by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/185
  • Fix DROP USER ownership reassignment and wire version reset by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/186
  • Fix ownership and CRDT scoping by database by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/187
  • fix(native): dispatch txn commit batch to the owning vshard by @laksamanakeris in https://github.com/NodeDB-Lab/nodedb/pull/196
  • Fix issues #188–#193 by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/197
  • fix(auth): materialize trust superuser identity by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/198
  • Fix stale state after collection drop and re-create by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/203
  • Fix cluster harness superuser identity and single-node tenant teardown storage reclaim by @farhan-syah in https://github.com/NodeDB-Lab/nodedb/pull/205

New Contributors

  • @mkhairi made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/114
  • @habibtalib made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/128
  • @laksamanakeris made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/174
  • @pizofreude made their first contribution in https://github.com/NodeDB-Lab/nodedb/pull/182

Full Changelog: https://github.com/NodeDB-Lab/nodedb/compare/v0.2.1...v0.4.0

Security Fixes

  • fix(security): enforce SQL authorization across transports
  • fix(security): preserve credential integrity across auth lifecycle
  • fix(security): bind OIDC providers to trusted tenants
  • fix(security): prevent external superuser assertions

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track NodeDB

Get notified when new releases ship.

Sign up free

About NodeDB

All releases →

Beta — feedback welcome: [email protected]