Skip to content

2.19.6

Choose a tag to compare

View all tags
@gaiksaya gaiksaya released this 06 Jul 19:31
Immutable release. Only release title and notes can be modified.
2.19.6
97f02d8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Version 2.19.6 Release Notes

Compatible with OpenSearch and OpenSearch Dashboards version 2.19.6

Bug Fixes

  • Fix blank Discover page when saved queries contain object-type (JSON format) query values (#11533)
  • Fix opening links in new tab from table fields (#11456)

Security

  • Prevent privilege escalation via unauthorized data source credential access in multi-data-source deployments (#12259)
  • Block config type in saved-objects import pipeline and align input handling across data source routes (#12085)
  • Harden HTTP redirect path handling to reject malformed request paths (#12193)
  • Resolve CVE-2026-28292, CVE-2026-33937, and CVE-2026-25639 by bumping simple-git, handlebars, and axios (#11628)
  • Resolve multiple high/medium dependency CVEs including lodash, node-forge, dompurify, minimatch, ajv, tar, hono, and others (#12257)

Infrastructure

  • Pin GitHub Actions to commit SHAs to prevent supply chain attacks (#12041)

Maintenance

  • Backport version increment workflow and bump version to 2.19.6 (#11988)
Assets 3
Loading