<?xml version='1.0' encoding='utf-8'?>
<rss version="2.0"><channel><title>Changelogs.us Security &amp; CVE Advisories</title><link>https://changelogs.us/security/</link><description>Real-time security advisories and vulnerability patches for open-source developer tools.</description><item><title>🛡️ Meilisearch v1.55.1: Security Patch</title><link>https://changelogs.us/meilisearch/updates/v1.55.1/</link><guid>https://changelogs.us/meilisearch/updates/v1.55.1/</guid><description>Meilisearch v1.55.1 releases important security fixes for instances running v1.55.0 and earlier. Upgrading is recommended for all users to ensure system security, though no new features are included in this patch.</description><pubDate>Mon, 02 Nov 2026 09:39:44 +0000</pubDate></item><item><title>🛡️ Meilisearch v1.56.1: Security Patch</title><link>https://changelogs.us/meilisearch/updates/v1.56.1/</link><guid>https://changelogs.us/meilisearch/updates/v1.56.1/</guid><description>Meilisearch v1.56.1 delivers key security and stability fixes, addressing high memory usage during long filter execution and rustls dependencies. It also resolves runtime panics associated with modifying searchable attributes after updating nested document fields.</description><pubDate>Mon, 02 Nov 2026 09:38:53 +0000</pubDate></item><item><title>🛡️ n8n n8n@1.123.92: Security Patch</title><link>https://changelogs.us/n8n/updates/n8n-1.123.92/</link><guid>https://changelogs.us/n8n/updates/n8n-1.123.92/</guid><description>n8n n8n@1.123.92 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.</description><pubDate>Mon, 02 Nov 2026 08:36:14 +0000</pubDate></item><item><title>🛡️ Twenty twenty/v2.54.0: Security Patch</title><link>https://changelogs.us/twenty/updates/twenty-v2.54.0/</link><guid>https://changelogs.us/twenty/updates/twenty-v2.54.0/</guid><description>Twenty twenty/v2.54.0. Source highlight: Remove the IS_MESSAGE_CAMPAIGN_ENABLED feature flag (#28929)</description><pubDate>Fri, 30 Oct 2026 21:49:36 +0000</pubDate></item><item><title>🛡️ Twenty twenty/v2.53.1: Security Patch</title><link>https://changelogs.us/twenty/updates/twenty-v2.53.1/</link><guid>https://changelogs.us/twenty/updates/twenty-v2.53.1/</guid><description>Twenty twenty/v2.53.1. Source highlight: Notes look like they did before the TipTap migration. Extra padding is gone, and block styles match what BlockNote rendered. The inbox gets two visible upgrades: the sidebar expands each channel into Open, Assigned, Snoozed, and Done views with counts, and an unread badge appears on the inbox naviga</description><pubDate>Fri, 30 Oct 2026 12:39:38 +0000</pubDate></item><item><title>🛡️ n8n n8n@1.123.91: Security Patch</title><link>https://changelogs.us/n8n/updates/n8n-1.123.91/</link><guid>https://changelogs.us/n8n/updates/n8n-1.123.91/</guid><description>n8n n8n@1.123.91. Source highlight: **core:** Fix $('Node') expressions returning null for legacy Code node output (#42249) (18c89cd)</description><pubDate>Fri, 30 Oct 2026 08:44:27 +0000</pubDate></item><item><title>🛡️ n8n stable: Security Patch</title><link>https://changelogs.us/n8n/updates/stable/</link><guid>https://changelogs.us/n8n/updates/stable/</guid><description>n8n stable. Source highlight: **core:** Require execution:read when workflow-scoped routes read execution data (#42446) (93638f4)</description><pubDate>Fri, 30 Oct 2026 08:24:58 +0000</pubDate></item><item><title>🛡️ n8n n8n@2.45.7: Security Patch</title><link>https://changelogs.us/n8n/updates/n8n-2.45.7/</link><guid>https://changelogs.us/n8n/updates/n8n-2.45.7/</guid><description>n8n n8n@2.45.7. Source highlight: **core:** Require execution:read when workflow-scoped routes read execution data (#42446) (93638f4)</description><pubDate>Fri, 30 Oct 2026 08:24:56 +0000</pubDate></item><item><title>🛡️ PostHog product-2162eebdeb: Security Patch</title><link>https://changelogs.us/posthog/updates/product-2162eebdeb/</link><guid>https://changelogs.us/posthog/updates/product-2162eebdeb/</guid><description>PostHog has expanded marketing reporting data for Data Warehouse sources including Meta Ads, LinkedIn Ads, Ahrefs, and HeyReach. Users now have access to video engagement, conversion and reach metrics, landing page URLs, daily site metrics, and sender-level campaign statistics.</description><pubDate>Fri, 30 Oct 2026 00:00:00 +0000</pubDate></item><item><title>🛡️ PostHog product-f0b07a3dda: Security Patch</title><link>https://changelogs.us/posthog/updates/product-f0b07a3dda/</link><guid>https://changelogs.us/posthog/updates/product-f0b07a3dda/</guid><description>PostHog expanded its Data Warehouse catalog with hundreds of new tables and API endpoints across marketing, sales, engineering, finance, and workforce sources. This update enables teams to query a much broader range of external data directly within PostHog.</description><pubDate>Fri, 30 Oct 2026 00:00:00 +0000</pubDate></item><item><title>🛡️ PostHog product-aea9af4dcb: Security Patch</title><link>https://changelogs.us/posthog/updates/product-aea9af4dcb/</link><guid>https://changelogs.us/posthog/updates/product-aea9af4dcb/</guid><description>PostHog has expanded its Hookdeck Data Warehouse source to support importing ignored request events, transformation executions, and destination queue metrics. This provides deeper observability and query capabilities when investigating suspicious webhook deliveries.</description><pubDate>Fri, 30 Oct 2026 00:00:00 +0000</pubDate></item><item><title>🛡️ PostHog product-a6e35b4afd: Security Patch</title><link>https://changelogs.us/posthog/updates/product-a6e35b4afd/</link><guid>https://changelogs.us/posthog/updates/product-a6e35b4afd/</guid><description>PostHog's Data Warehouse now supports flexible Amazon S3 URL formats and improved configuration for region-agnostic buckets. Delta Lake synchronization is now more efficient with default incremental syncs and deduplication logic.</description><pubDate>Fri, 30 Oct 2026 00:00:00 +0000</pubDate></item><item><title>🛡️ OpenTofu v1.12.11: Security Patch</title><link>https://changelogs.us/opentofu/updates/v1.12.11/</link><guid>https://changelogs.us/opentofu/updates/v1.12.11/</guid><description>OpenTofu v1.12.11. Source highlight: Fixed panic when provided invalid state encryption configuration. (#4784)</description><pubDate>Thu, 29 Oct 2026 19:37:42 +0000</pubDate></item><item><title>🛡️ Hugging Face Transformers v5.22.0: Security Patch</title><link>https://changelogs.us/transformers/updates/v5.22.0/</link><guid>https://changelogs.us/transformers/updates/v5.22.0/</guid><description>Hugging Face Transformers v5.22.0 introduces the Mistral Large 4 1T-parameter model and adds support for FP8 adapter training. The release includes a breaking architectural change regarding Execution Provider (EP) logic separation.</description><pubDate>Thu, 29 Oct 2026 14:15:39 +0000</pubDate></item><item><title>🛡️ NocoDB 2026.10.1: Security Patch</title><link>https://changelogs.us/nocodb/updates/2026.10.1/</link><guid>https://changelogs.us/nocodb/updates/2026.10.1/</guid><description>NocoDB 2026.10.1. Source highlight: ⚠️ **Timestamps include milliseconds.** On PostgreSQL and SQLite, date and time values in API responses, webhook payloads and CSV exports now include milliseconds (`12:34:56.000+00:00`). Check integrations that read dates in a fixed format.</description><pubDate>Thu, 29 Oct 2026 11:19:16 +0000</pubDate></item><item><title>🛡️ Open WebUI v0.12.5: Security Patch</title><link>https://changelogs.us/open-webui/updates/v0.12.5/</link><guid>https://changelogs.us/open-webui/updates/v0.12.5/</guid><description>Open WebUI v0.12.5 introduces an Analytics session explorer, multi-page notes, and live presence alongside major performance optimizations for large knowledge bases and chat searches. It also includes critical security fixes and resolves token counting calculation inflations.</description><pubDate>Thu, 29 Oct 2026 09:08:03 +0000</pubDate></item><item><title>🛡️ n8n n8n@1.123.90: Security Patch</title><link>https://changelogs.us/n8n/updates/n8n-1.123.90/</link><guid>https://changelogs.us/n8n/updates/n8n-1.123.90/</guid><description>n8n n8n@1.123.90. Source highlight: **core:** Require a signed token to accept an invitation (#42292) (4580f22)</description><pubDate>Thu, 29 Oct 2026 09:00:47 +0000</pubDate></item><item><title>🛡️ n8n n8n@2.45.6: Security Patch</title><link>https://changelogs.us/n8n/updates/n8n-2.45.6/</link><guid>https://changelogs.us/n8n/updates/n8n-2.45.6/</guid><description>n8n n8n@2.45.6. Source highlight: **core:** Record dynamic time saved for executions in queue mode (#42482) (f2f0c2f)</description><pubDate>Thu, 29 Oct 2026 08:30:41 +0000</pubDate></item><item><title>🛡️ SurrealDB v3.3.5: Security Patch</title><link>https://changelogs.us/surrealdb/updates/v3.3.5/</link><guid>https://changelogs.us/surrealdb/updates/v3.3.5/</guid><description>SurrealDB v3.3.5 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.</description><pubDate>Thu, 29 Oct 2026 00:36:27 +0000</pubDate></item><item><title>🛡️ PostHog product-77b42ad13d: Security Patch</title><link>https://changelogs.us/posthog/updates/product-77b42ad13d/</link><guid>https://changelogs.us/posthog/updates/product-77b42ad13d/</guid><description>Official PostHog product update: Upload Flutter source context. Read the publisher’s changelog for full details.</description><pubDate>Thu, 29 Oct 2026 00:00:00 +0000</pubDate></item><item><title>🛡️ Biome @biomejs/biome@2.6.4: Security Patch</title><link>https://changelogs.us/biome/updates/biomejs-biome-2.6.4/</link><guid>https://changelogs.us/biome/updates/biomejs-biome-2.6.4/</guid><description>Biome @biomejs/biome@2.6.4. Source highlight: Added the new nursery rule `noConsoleSpaces`, which reports a leading or trailing space in a `console.log()`, `console.debug()`, `console.info()`, `console.warn()`, or `console.error()` argument that sits next to another argument. These methods already put a space between arguments, so such a space </description><pubDate>Wed, 28 Oct 2026 23:56:29 +0000</pubDate></item><item><title>🛡️ Astro astro@7.4.4: Security Patch</title><link>https://changelogs.us/astro/updates/astro-7.4.4/</link><guid>https://changelogs.us/astro/updates/astro-7.4.4/</guid><description>Astro astro@7.4.4. Source highlight: Allows `astro add` to configure tagged versions of official adapters</description><pubDate>Wed, 28 Oct 2026 20:19:39 +0000</pubDate></item><item><title>🛡️ Raycast v2.10: Security Patch</title><link>https://changelogs.us/raycast/updates/v2.10/</link><guid>https://changelogs.us/raycast/updates/v2.10/</guid><description>Raycast v2.10. Source highlight: In this week's release, we've made a bunch of updates to Raycast Notes, some of which have been highly requested!</description><pubDate>Wed, 28 Oct 2026 16:55:50 +0000</pubDate></item><item><title>🛡️ Cypress v16.2.1: Security Patch</title><link>https://changelogs.us/cypress/updates/v16.2.1/</link><guid>https://changelogs.us/cypress/updates/v16.2.1/</guid><description>Cypress v16.2.1 is published, but the available notes are too limited to assess upgrade impact. Review the official source before upgrading.</description><pubDate>Wed, 28 Oct 2026 16:25:10 +0000</pubDate></item><item><title>🛡️ Astro astro@7.4.3: Security Patch</title><link>https://changelogs.us/astro/updates/astro-7.4.3/</link><guid>https://changelogs.us/astro/updates/astro-7.4.3/</guid><description>Astro astro@7.4.3. Source highlight: CSP no longer hashes empty children on external stylesheets and scripts, which was inserting the SHA-256 of the empty string into `script-src` and `style-src`.</description><pubDate>Wed, 28 Oct 2026 14:49:15 +0000</pubDate></item><item><title>🛡️ Saleor 3.23.45: Security Patch</title><link>https://changelogs.us/saleor/updates/3.23.45/</link><guid>https://changelogs.us/saleor/updates/3.23.45/</guid><description>Saleor 3.23.45. Source highlight: chore: bump uv &amp; virtualenv</description><pubDate>Wed, 28 Oct 2026 13:47:33 +0000</pubDate></item><item><title>🛡️ Saleor 3.22.76: Security Patch</title><link>https://changelogs.us/saleor/updates/3.22.76/</link><guid>https://changelogs.us/saleor/updates/3.22.76/</guid><description>Saleor 3.22.76. Source highlight: chore: bump uv &amp; virtualenv</description><pubDate>Wed, 28 Oct 2026 13:31:11 +0000</pubDate></item><item><title>🛡️ Strapi v5.60.0: Security Patch</title><link>https://changelogs.us/strapi/updates/v5.60.0/</link><guid>https://changelogs.us/strapi/updates/v5.60.0/</guid><description>Strapi v5.60.0. Source highlight: **admin:** record SSO settings updates in audit logs (#28135)</description><pubDate>Wed, 28 Oct 2026 10:15:52 +0000</pubDate></item><item><title>🛡️ n8n n8n@1.123.89: Security Patch</title><link>https://changelogs.us/n8n/updates/n8n-1.123.89/</link><guid>https://changelogs.us/n8n/updates/n8n-1.123.89/</guid><description>n8n n8n@1.123.89. Source highlight: **Google Drive Node:** Fix infinite pagination loop in v1 API request (#42124) (3faa762)</description><pubDate>Wed, 28 Oct 2026 07:28:11 +0000</pubDate></item><item><title>🛡️ n8n n8n@2.45.5: Security Patch</title><link>https://changelogs.us/n8n/updates/n8n-2.45.5/</link><guid>https://changelogs.us/n8n/updates/n8n-2.45.5/</guid><description>n8n n8n@2.45.5. Source highlight: **core:** Keep the ExpressionError name in minified builds (#42309) (b3192c6)</description><pubDate>Wed, 28 Oct 2026 07:16:05 +0000</pubDate></item><item><title>🛡️ Kubernetes v1.36.6: Security Patch</title><link>https://changelogs.us/kubernetes/updates/v1.36.6/</link><guid>https://changelogs.us/kubernetes/updates/v1.36.6/</guid><description>Kubernetes v1.36.6. Source highlight: See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.</description><pubDate>Wed, 28 Oct 2026 04:56:35 +0000</pubDate></item><item><title>🛡️ Kubernetes v1.37.2: Security Patch</title><link>https://changelogs.us/kubernetes/updates/v1.37.2/</link><guid>https://changelogs.us/kubernetes/updates/v1.37.2/</guid><description>Kubernetes v1.37.2. Source highlight: See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.</description><pubDate>Wed, 28 Oct 2026 04:37:53 +0000</pubDate></item><item><title>🛡️ Kubernetes v1.34.13: Security Patch</title><link>https://changelogs.us/kubernetes/updates/v1.34.13/</link><guid>https://changelogs.us/kubernetes/updates/v1.34.13/</guid><description>Kubernetes v1.34.13. Source highlight: See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.</description><pubDate>Wed, 28 Oct 2026 04:37:39 +0000</pubDate></item><item><title>🛡️ Kubernetes v1.35.10: Security Patch</title><link>https://changelogs.us/kubernetes/updates/v1.35.10/</link><guid>https://changelogs.us/kubernetes/updates/v1.35.10/</guid><description>Kubernetes v1.35.10. Source highlight: See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.</description><pubDate>Wed, 28 Oct 2026 04:37:28 +0000</pubDate></item><item><title>🛡️ Directus v12.6.0: Security Patch</title><link>https://changelogs.us/directus/updates/v12.6.0/</link><guid>https://changelogs.us/directus/updates/v12.6.0/</guid><description>Directus v12.6.0. Source highlight: ⚠️ Potential Breaking Changes</description><pubDate>Tue, 27 Oct 2026 16:59:02 +0000</pubDate></item><item><title>🛡️ Twenty twenty/v2.52.0: Security Patch</title><link>https://changelogs.us/twenty/updates/twenty-v2.52.0/</link><guid>https://changelogs.us/twenty/updates/twenty-v2.52.0/</guid><description>Twenty twenty/v2.52.0. Source highlight: Let apps connect accounts through their own authorization flow (#28672)</description><pubDate>Tue, 27 Oct 2026 16:54:00 +0000</pubDate></item><item><title>🛡️ [CVE-2026-100105, CVE-2026-103506, CVE-2026-88858, CVE-2026-88967] Grafana v13.2.5: Security Patch</title><link>https://changelogs.us/grafana/updates/v13.2.5/</link><guid>https://changelogs.us/grafana/updates/v13.2.5/</guid><description>Grafana v13.2.5. Source highlight: Download page</description><pubDate>Tue, 27 Oct 2026 11:34:35 +0000</pubDate></item><item><title>🛡️ [CVE-2026-100105, CVE-2026-88858, CVE-2026-88967] Grafana v13.0.12: Security Patch</title><link>https://changelogs.us/grafana/updates/v13.0.12/</link><guid>https://changelogs.us/grafana/updates/v13.0.12/</guid><description>Grafana v13.0.12. Source highlight: Download page</description><pubDate>Tue, 27 Oct 2026 11:24:50 +0000</pubDate></item><item><title>🛡️ [CVE-2026-100105, CVE-2026-88858, CVE-2026-88967] Grafana v13.1.9: Security Patch</title><link>https://changelogs.us/grafana/updates/v13.1.9/</link><guid>https://changelogs.us/grafana/updates/v13.1.9/</guid><description>Grafana v13.1.9. Source highlight: Download page</description><pubDate>Tue, 27 Oct 2026 11:22:36 +0000</pubDate></item><item><title>🛡️ [CVE-2026-100105, CVE-2026-88858, CVE-2026-88967] Grafana v12.4.14: Security Patch</title><link>https://changelogs.us/grafana/updates/v12.4.14/</link><guid>https://changelogs.us/grafana/updates/v12.4.14/</guid><description>Grafana v12.4.14. Source highlight: Download page</description><pubDate>Tue, 27 Oct 2026 11:20:05 +0000</pubDate></item></channel></rss>