Platform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
COMMITS
April 1, 2026
M
chore: cypress tags audit (#41683)
Manish Kumar committed
M
chore: added JVM args for traces with JDK25 (#41682)
Manish Kumar committed
March 31, 2026
S
fix(security): block SSRF via send-test-email SMTP host validation (GHSA-vvxf-f8q9-86gh) (#41666)
subratadeypappu committed
March 30, 2026
M
fix: critical CVE 2025-70952 fix (#41673)
Manish Kumar committed
S
fix(security): upgrade handlebars to 4.7.9 to fix CVE-2026-33937 (#41672)
subratadeypappu committed
S
fix(security): mitigate CVE-2026-22732 — Spring Security HTTP headers not written (#41669)
subratadeypappu committed
March 27, 2026
M
fix: Datasource query doesn't fail when created At field is missing (#41665)
Manish Kumar committed
S
fix: normalize user emails on save to strip invisible Unicode characters (#41664)
subratadeypappu committed
March 26, 2026
M
chore: docker file cleanup for base JDK removal and install of JDK25 (#41662)
Manish Kumar committed
March 25, 2026
M
ci: run config for jdk 25 (#41654)
Manish Kumar committed
M
build: upgrade appsmith to jdk 25 and spring boot 3.5.11 (#41644)
Manish Kumar committed
March 24, 2026
M
chore: improve error git route aspect rules (#41650)
Manish Kumar committed
March 23, 2026
S
S
fix(interfaces): validate filter temp table name before DROP TABLE (#41642)
subratadeypappu committed
S
fix(arangoDBPlugin): prevent AQL injection via unsafe string concatenation (#41641)
subratadeypappu committed
March 20, 2026
S
fix(ssrf): expand metadata denylist (GHSA-9m89-5jw7-q5cr) (#41643)
subratadeypappu committed
S
fix(server): harden admin env value escaping (#41637)
subratadeypappu committed
M
chore: update codeowners (#41645)
Manish Kumar committed
S
fix(security): sanitize URL in ManualUpgrades to prevent reflected XSS (#41636)
subratadeypappu committed
March 19, 2026
S
fix(server): enforce edit permission on application snapshot deletion (GHSA-g2hc-wmw2-32jr) (#41624)
subratadeypappu committed
March 18, 2026
W
chore: move apt packages from main Dockerfile into base image layer (#41630)
Wyatt Walter committed
M
chore: add SSH key support for CE git connect flow (#41632)
Manish Kumar committed
March 17, 2026
M
chore: promoted release_static_url_enabled to license (#41626)
Manish Kumar committed
S
fix: Show Red Asterisk on Required Fields (#41609)
Stacey Levine committed
March 16, 2026
S
fix(security): prevent unauthenticated disclosure of instance metadata [APP-14994] (#41598)
subratadeypappu committed
March 13, 2026
W
chore: use redis from upstream image (#41616)
Wyatt Walter committed
S
fix(server): prevent SQL injection in UQI filter service projection and sortBy columns (#41594)
subratadeypappu committed
S
fix(Security): restrict draft action execution to editors (#41614)
subratadeypappu committed
March 12, 2026
M
chore: optional base image to build appsmith image from (#41615)
Manish Kumar committed
W
chore: upgrade redis to 7.4 in base dockerfile (#41581)
Wyatt Walter committed