Release v2.4.1
Appsmith v2.4.1 includes security hardening for Databricks JDBC connections, netty dependency updates to address CVE-2026-75595, SQL injection prevention in UQI filtering, and reliability improvements to prevent AI plugin failures and Redis corruption. New features include non-interactive appsmithctl restore and UI improvements for responsive applications.
🔐 Security
- Databricks JDBC connections — Validated Databricks datasource URLs and connected through the Databricks driver directly, so non-Databricks JDBC URLs are rejected. (#42244)
- Updated
netty-handlerfrom 4.1.136 to 4.1.137 to address CVE-2026-75595. (#42217) - Validated WHERE-clause column names in UQI filtering so untrusted identifiers cannot be used as SQL column names. (#42224)
- Used the hardened WebClient builder in AI and Google Sheets plugins. (#42177)
- Updated client and server dependencies to address reported vulnerabilities. (#42214, #42173, #42218)
🛠️ Reliability
- Prevented OpenAI, Anthropic, and Google AI plugins from loading a conflicting
spring-webfluxcopy. That failure could take down AI queries and corrupt the shared Redis connection. (#42240) - Reduced redundant Segment API calls. (#42216)
✨ New Features & Enhancements
- Added non-interactive
appsmithctl restorefor automation. (#42147)
🎨 UI & Widget Improvements
- Stopped filing Anvil applications under “AI Agents” and renamed them “responsive”. (#42219)
🔧 Git, Deployment & Configuration
Source: original entry ↗
More from Appsmith
Follow Appsmith to get its new changes in your feed and email digest.
Release v2.5.0
Appsmith v2.5.0 includes security patches for bundled dependencies, stricter datasource credential handling and permission checks, schema updates for Git-connected applications with potential breaking changes to Elasticsearch bindings, and new features like application descriptions, list widget selection controls, and enhanced table column formatting. Appsmith AI reached end-of-life on September 30, 2026 and can no longer be used.
Release v2.4.3
Appsmith v2.4.3 includes end-of-life notice for Appsmith AI (September 30, 2026), security updates for bundled dependencies, improved error message handling in action executions, and UI enhancements like font controls in Rich Text Editor and restored search/filtering in Table widgets.
Release v2.4.2
Appsmith v2.4.2 includes security updates for bundled dependencies including Bouncy Castle, fixes for page cloning performance to prevent memory exhaustion, improved UI consistency for Ask AI and OAuth2 fields, and enhancements to Git and deployment tools. Appsmith AI reaches end-of-life on September 30, 2026, and users must migrate to direct provider datasources.