Skip to content

parseable

v2.9.5 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

Published 4d Logging
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Topics

agent-observability alerting apm cloud-native dashboards events
+12 more
grafana-alternative log-storage prometheus s3 observability opensource opentelemetry parquet promql rust self-hosted telemetry

Affected surfaces

auth rce_ssrf

Summary

AI summary

Updates fix, chore, and kafka across a mixed release.

Full changelog

What's Changed

  • fix: user auth for datasets by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1725
  • chore: migrate helm charts to its own repo by @nitisht in https://github.com/parseablehq/parseable/pull/1726
  • cache-control to no-store for metadata uploads to S3 by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1728
  • feat(kafka): add AWS MSK IAM authentication via SASL/OAUTHBEARER by @piclemx in https://github.com/parseablehq/parseable/pull/1730
  • Adds a configurable OAuth provider for Kafka SASL/OAUTHBEARER by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1731
  • Fix/ssrf alerts target by @ygndotgg in https://github.com/parseablehq/parseable/pull/1665
  • fix(storage): block path traversal in filters API on localfs by @ygndotgg in https://github.com/parseablehq/parseable/pull/1727
  • update: kafka by @parmesant in https://github.com/parseablehq/parseable/pull/1732
  • update Cargo.toml for release v2.9.5 by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1733

New Contributors

  • @piclemx made their first contribution in https://github.com/parseablehq/parseable/pull/1730

Full Changelog: https://github.com/parseablehq/parseable/compare/v2.9.4...v2.9.5

Security Fixes

  • Fix: user auth for datasets
  • fix(storage): block path traversal in filters API on localfs
  • Fix/ssrf alerts target

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track parseable

Get notified when new releases ship.

Sign up free

About parseable

Parseable is an observability datalake built from first principles.

All releases →

Beta — feedback welcome: [email protected]