Skip to content

appsmith

Developer Productivity

An open‑source low‑code platform for rapidly building, deploying and maintaining custom internal applications such as dashboards, admin panels and automation tools.

TypeScript Latest v2.2 · 18d ago Security brief →

Features

  • Low‑code visual builder for creating custom internal apps quickly
  • Supports deployment via Docker, Kubernetes, or AWS AMI out of the box
  • Extensive documentation and learning resources (tutorials, videos, templates)
  • Active community with Discord support and a dedicated community portal

Recent releases

View all 8 releases →
Upgrade now
v2.2 Breaking risk
Dependencies Breaking upgrade

IN_DOCKER removal + CVE fixes

Review required
v2.1 Breaking risk
RCE / SSRF Dependencies Auth +1 more

SSRF filter + Caddy + Supervisord

Review required
v2.0 Breaking risk
RCE / SSRF Auth Dependencies +1 more

Mandatory v1.99 intermediate upgrade

v1.99 Breaking risk
Security fixes
  • CVE-2025-70952 (critical)
  • CVE-2026-33937 (handlebars upgrade)
  • CVE-2026-22732 (Spring Security HTTP headers)
Notable features
  • AQL injection prevention in ArangoDB plugin
  • Reflected XSS prevention in ManualUpgrades
v1.98 Security relevant
Security fixes
  • Enforced edit permissions for application snapshot deletion (GHSA-g2hc-wmw2-32jr)
  • Prevented unauthenticated disclosure of instance metadata (APP-14994)
  • Prevented SQL injection in UQI filter service projection and sortBy columns
Notable features
  • TLS (SSL mode) support for Redis datasource

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
40,394
Forks
4,669
Languages
TypeScript Java JavaScript

Install & Platforms

Install via
docker

Community & Support

Open source alternatives

Beta — feedback welcome: [email protected]