Skip to content

v.2.2.0

Choose a tag to compare

View all tags
@nikosdion nikosdion released this 03 Jul 08:04
· 105 commits to main since this release
2.2.0
This tag was signed with the committer’s verified signature.
nikosdion Nicholas K. Dionysopoulos
SSH Key Fingerprint: FkGgGJy93Ng5M4xQuwR9ZCy4kBHM3edeyz6t9pSm5ko
Verified
Learn about vigilant mode.
a92b622
This commit was signed with the committer’s verified signature.
nikosdion Nicholas K. Dionysopoulos
SSH Key Fingerprint: FkGgGJy93Ng5M4xQuwR9ZCy4kBHM3edeyz6t9pSm5ko
Verified
Learn about vigilant mode.

Highlights

Security. This release fixes a critical vulnerability in API token management, along with several lower-severity authorisation and CSRF hardening issues across the sites batch processing, log viewer, self-update tasks, extension/plugin update scheduling, the PHP information page, logout / consent decline / connection doctor actions, and the reports view. We strongly recommend updating as soon as possible; see the CHANGELOG for the full, itemised list.

New: optional MCP server. Panopticon can now expose an MCP (Model Context Protocol) server, letting AI agents and chatbots query and manage your monitored sites through a standard tool-calling interface. This is opt-in and disabled by default.

Core File Integrity Check now supports WordPress. Previously Joomla-only, the checksum-based core file integrity check now also works against WordPress sites.

Configurable checksums source. The base URL used to fetch Core File Integrity checksums is now configurable, for environments that need to point at a custom or mirrored source.

Other changes. The main software update source has moved to https://getpanopticon.com/update.json. The Template Overrides view now consistently requires the per-site admin privilege for both the view and its entry button. German (de-DE) machine translation has been added.

Also fixes a fatal error when reporting extension/plugin update results, and tightens authorisation checks on site refresh/update scheduling that had previously been too permissive.

Assets 3
Loading