1 min read
‧ 1 min read
Following our security update last week, today we are releasing hardened versions of Metabase which incorporate several security improvements, including hardening our api and fixing issues that are derivatives of the vulnerability we encountered last week.
We strongly encourage you to upgrade immediately.
This update was largely a result of our first-party security research (with hat tips to DOS, Ophion Security and Anthropic for helping identify areas of focus).
While we’re proud of the new features we’ve developed, we’re holding off on our next release, and will instead focus on weekly minor releases. These will be largely security and observability centered.
We understand you are interested in what happened and how you can best protect yourself. We appreciate your patience as our internal and external investigations proceed, and we will update you if we have additional relevant information to share.
In the meantime, we’re working hard to protect you and help you protect yourselves. We will continue to invest heavily in our internal security research as well as engage with third-party researchers.
See the list of versions below and find the latest point version for the Metabase version you’re running. For example, if you are running 0.58.6, you should upgrade to 0.58.28 release or later.
The downloads below include the minimum safe release for each Metabase version.
v0.63.10
v0.62.13
v0.61.15
v0.60.21
v0.59.25
v0.58.28
