Redash v26.9.0 is availabel with **13 security fixes**

[arikfr]

We’re happy to announce Redash v26.9.0!

redash-v26.9.0-1080.mp4

This release addresses 13 recently reported security vulnerabilities, alongside additional security improvements. It also adds Cloudflare D1 support, upgrades the frontend stack, and includes several other improvements. See the release notes for full details and compatibility notes.

No database migrations are required when upgrading from v26.3.0. Please review the upgrade notes, particularly the changes to custom JavaScript charts and query permissions.

We encourage everyone to upgrade as soon as possible. If you can’t upgrade immediately, review the security advisories to understand the impact on your installation and available workarounds.

Thanks to @AmerMrkaljevic, @arikfr, @b-hermes, @bonisb, @emilhuseyn, @eradman, @eran132, @fjuliofontes, @galanko, @InsiderPhD, @jankesec, @JoseLuisSanchez-CBRT, @kimsehwan96, @kta1kri, @madmuffin1, @nmosafi, @PhilipPhil, @RacerZ-fighting, @Rat5ak, @seungoh-lee, @shojiiii, @snickerjp, @vladenisov, @wtfiwtz, @X-Crux, @xlumzee, @yoshiokatsuneo, @zachliu, and @zer0d4y5 for helping improve this release through code contributions, reviews, security disclosures, and research.