✓ No known CVEs patched
This release patches 3 known CVEs
Topics
agent-observability
alerting
apm
cloud-native
dashboards
events
+12 more
grafana-alternative
log-storage
prometheus
s3
observability
opensource
opentelemetry
parquet
promql
rust
self-hosted
telemetry
Affected surfaces
auth
rce_ssrf
Summary
AI summaryUpdates fix, chore, and kafka across a mixed release.
Full changelog
What's Changed
- fix: user auth for datasets by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1725
- chore: migrate helm charts to its own repo by @nitisht in https://github.com/parseablehq/parseable/pull/1726
- cache-control to no-store for metadata uploads to S3 by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1728
- feat(kafka): add AWS MSK IAM authentication via SASL/OAUTHBEARER by @piclemx in https://github.com/parseablehq/parseable/pull/1730
- Adds a configurable OAuth provider for Kafka SASL/OAUTHBEARER by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1731
- Fix/ssrf alerts target by @ygndotgg in https://github.com/parseablehq/parseable/pull/1665
- fix(storage): block path traversal in filters API on localfs by @ygndotgg in https://github.com/parseablehq/parseable/pull/1727
- update: kafka by @parmesant in https://github.com/parseablehq/parseable/pull/1732
- update Cargo.toml for release v2.9.5 by @nikhilsinhaparseable in https://github.com/parseablehq/parseable/pull/1733
New Contributors
- @piclemx made their first contribution in https://github.com/parseablehq/parseable/pull/1730
Full Changelog: https://github.com/parseablehq/parseable/compare/v2.9.4...v2.9.5
Security Fixes
- Fix: user auth for datasets
- fix(storage): block path traversal in filters API on localfs
- Fix/ssrf alerts target
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]