Svix

v1.98.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 9d API Development

✓ No known CVEs patched

This release patches 1 known CVE

Topics

api background-jobs background-tasks event-driven kafka messaging

+12 more

queue rabbitmq redis rust stream webhook webhook-dispatcher webhook-ingester webhook-server webhook-service webhooks webhooks-server

Affected surfaces

auth rbac

Summary

AI summary

Improved endpoint URL validation and added OCI metadata to Docker images.

Type	Severity	Summary	CVE
Feature	Low	Set OCI metadata on Docker images for CLI, Server, Bridge. Set OCI metadata on Docker images for CLI, Server, Bridge. Source: llm_adapter@2026-07-17 Confidence: high	—
Feature	Low	Embed package metadata in compiled Linux binaries for CLI, Server, Bridge. Embed package metadata in compiled Linux binaries for CLI, Server, Bridge. Source: llm_adapter@2026-07-17 Confidence: high	—
Bugfix	Medium	Improve validation of endpoint URLs in Server (SVIXSEC-2026-0001). Improve validation of endpoint URLs in Server (SVIXSEC-2026-0001). Source: llm_adapter@2026-07-17 Confidence: low	—

Full changelog

Full Changelog: https://github.com/svix/svix-webhooks/compare/v1.97.0...v1.98.0

SVIXSEC-2026-0001 — Improved validation of endpoint URLs to prevent malformed URL attacks

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Svix

Get notified when new releases ship.

About Svix

Open-source webhooks as a service that makes it super easy for API providers to send webhooks.