Pomerium releases

Review required

v0.33.0 Breaking risk · 10d

Dependencies

Darwin removal + SDK update + many additions

Open

Upgrade now

v0.32.9 Security relevant · 1mo

Dependencies

Envoy update + header limit

Open

Upgrade now

v0.32.8 Security relevant · 1mo

Auth

GHSA security fix

Open

v0.32.7 Maintenance · 2mo

Minor fixes and improvements.

Full changelog

What's Changed

Changed

• update github.com/jackc/pgx/v5 from 5.8.0 to 5.9.2 by @kenjenkins in https://github.com/pomerium/pomerium/pull/6326
• bump Go version to 1.25.10 by @kenjenkins in https://github.com/pomerium/pomerium/pull/6329

Full Changelog: https://github.com/pomerium/pomerium/compare/v0.32.6...v0.32.7

View release on GitHub

v0.32.6 Breaking risk · 2mo

Breaking changes

• exp and nbf claims removed from core/session

Full changelog

What's Changed

Changed

• core/session: remove exp and nbf by @backport-actions-token[bot] in https://github.com/pomerium/pomerium/pull/6306

Full Changelog: https://github.com/pomerium/pomerium/compare/v0.32.5...v0.32.6

View release on GitHub

v0.32.5 Bug fix · 3mo

Fixes SSH authorization code flow issues with empty codes.

View release on GitHub

v0.32.4 Bug fix · 4mo

Patch release detecting proxy protocol changes in HTTP redirect server configuration.

View release on GitHub

v0.32.3 Security relevant · 4mo

Security fixes

• CVE-2026-26330
• CVE-2026-26308
• CVE-2026-26310

View release on GitHub

v0.32.2 Security relevant · 5mo

Security fixes

• Message smuggling via case-insensitive JSON unmarshalling in MCP

View release on GitHub

v0.32.0 Breaking risk · 6mo

Breaking changes

• Removed Envoy options from configuration

Notable features

• SSH port forward management
• MCP client support
• Databroker field indexing

View release on GitHub