Release v1.98
Added TLS support for Redis datasources and implemented multiple security fixes including SQL injection prevention, unauthenticated metadata disclosure prevention, and enforced permission checks. Also upgraded dependencies to resolve critical vulnerabilities.
Features
- Added TLS (SSL mode) support for the Redis datasource in both the backend and datasource UI. (#41587)
Fixes
- Enforced edit permissions for application snapshot deletion. (GHSA-g2hc-wmw2-32jr) (#41624)
- Added a red asterisk to required fields. (#41609)
- Prevented unauthenticated disclosure of instance metadata. [APP-14994] (#41598)
- Prevented SQL injection in UQI filter service
projectionandsortBycolumns. (#41594) - Restricted draft action execution to editors only. (#41614)
- Upgraded
simple-gitto3.32.3to resolve critical CVE-2026-28292. (#41613) - Upgraded
fast-xml-parserto4.5.4to resolve critical CVE-2026-25896. (#41595) - Increased the client class API timeout for the consolidated API from 20 seconds to 60 seconds. (#41591)
Source: original entry ↗
More from Appsmith
Follow Appsmith to get its new changes in your feed and email digest.
Release v2.5.0
Appsmith v2.5.0 includes security patches for bundled dependencies, stricter datasource credential handling and permission checks, schema updates for Git-connected applications with potential breaking changes to Elasticsearch bindings, and new features like application descriptions, list widget selection controls, and enhanced table column formatting. Appsmith AI reached end-of-life on September 30, 2026 and can no longer be used.
Release v2.4.3
Appsmith v2.4.3 includes end-of-life notice for Appsmith AI (September 30, 2026), security updates for bundled dependencies, improved error message handling in action executions, and UI enhancements like font controls in Rich Text Editor and restored search/filtering in Table widgets.
Release v2.4.2
Appsmith v2.4.2 includes security updates for bundled dependencies including Bouncy Castle, fixes for page cloning performance to prevent memory exhaustion, improved UI consistency for Ask AI and OAuth2 fields, and enhancements to Git and deployment tools. Appsmith AI reaches end-of-life on September 30, 2026, and users must migrate to direct provider datasources.