--- title: Security-focused Metabase Release Announcement | daily.dev description: Metabase has released hardened point versions across its 0.58 through 0.63 branches to fix API vulnerabilities and derivative issues stemming from a security... canonical: https://daily.dev/posts/security-focused-metabase-release-announcement-8iu6bkyqz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Security-focused Metabase Release Announcement | daily.dev og:description: Metabase has released hardened point versions across its 0.58 through 0.63 branches to fix API vulnerabilities and derivative issues stemming from a security... og:url: https://daily.dev/posts/security-focused-metabase-release-announcement-8iu6bkyqz og:image: https://api.daily.dev/og/posts/8iU6bKyQZ.png og:image:alt: Security-focused Metabase Release Announcement og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security-focused Metabase Release Announcement **[Metabase](https://daily.dev/sources/metabase)** · 2 min read · 0 upvotes · 0 comments ## Summary Metabase has released hardened point versions across its 0.58 through 0.63 branches to fix API vulnerabilities and derivative issues stemming from a security incident disclosed the prior week. Users are urged to upgrade immediately to the minimum safe release listed for their branch (e.g., 0.58.28, 0.59.25, 0.60.21, 0.61.15, 0.62.13, 0.63.10). Metabase says it will pause feature releases in favor of weekly security- and observability-focused minor releases, and credits DOS, Ophion Security, and Anthropic for helping identify areas of focus during its internal security research. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What version of Metabase should I upgrade to if I'm running 0.58.6 to fix the recent security vulnerability? You should upgrade to Metabase 0.58.28 or later. This is the minimum safe release for the 0.58 branch following a security update that hardened the API and fixed issues derived from a previously disclosed vulnerability. Other branches have corresponding minimum safe versions: 0.59.25, 0.60.21, 0.61.15, 0.62.13, and 0.63.10. _Teams tracking Metabase security patches can follow upgrade guidance and advisories on daily.dev._ ### Why is Metabase pausing new feature releases and only shipping weekly minor updates? Metabase is pausing its next feature release to focus on weekly minor releases centered on security and observability, following a security incident and subsequent hardening update. The company stated this shift is a direct response to internal and external investigations into a vulnerability and its derivative issues, with third-party researchers from DOS, Ophion Security, and Anthropic credited for helping identify focus areas. _Anyone weighing when to adopt a tool's new features versus stability can track this shift on daily.dev._ ## Similar posts on daily.dev - [Security update available for Metabase - Please upgrade now](https://daily.dev/posts/security-update-available-for-metabase---please-upgrade-now-tsxl6886g) · Metabase · 6 upvotes · 0 comments - [August 2026 Security Vulnerability: What happened?](https://daily.dev/posts/august-2026-security-vulnerability-what-happened--vf4dqe4hg) · Metabase · 6 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#bi](https://daily.dev/tags/bi) [View this post on daily.dev](https://daily.dev/posts/security-focused-metabase-release-announcement-8iu6bkyqz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Security-focused Metabase Release Announcement","url":"https://daily.dev/posts/security-focused-metabase-release-announcement-8iu6bkyqz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-focused-metabase-release-announcement-8iu6bkyqz"},"datePublished":"2026-08-13T02:29:45.133Z","dateModified":"2026-08-13T02:30:45.263Z","description":"Metabase has released hardened point versions across its 0.58 through 0.63 branches to fix API vulnerabilities and derivative issues stemming from a security...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/140d4607d0c81c5de941703e931a1582?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/140d4607d0c81c5de941703e931a1582?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Metabase","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Metabase","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/97c4b2294a914263b4f3b4a82a5f896b","url":"https://daily.dev/sources/metabase"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-focused-metabase-release-announcement-8iu6bkyqz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,bi","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Metabase","item":"https://daily.dev/sources/metabase"},{"@type":"ListItem","position":3,"name":"Security-focused Metabase Release Announcement"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/security-focused-metabase-release-announcement-8iu6bkyqz#faq","mainEntity":[{"@type":"Question","name":"What version of Metabase should I upgrade to if I'm running 0.58.6 to fix the recent security vulnerability?","acceptedAnswer":{"@type":"Answer","text":"You should upgrade to Metabase 0.58.28 or later. This is the minimum safe release for the 0.58 branch following a security update that hardened the API and fixed issues derived from a previously disclosed vulnerability. Other branches have corresponding minimum safe versions: 0.59.25, 0.60.21, 0.61.15, 0.62.13, and 0.63.10. Teams tracking Metabase security patches can follow upgrade guidance and advisories on daily.dev."}},{"@type":"Question","name":"Why is Metabase pausing new feature releases and only shipping weekly minor updates?","acceptedAnswer":{"@type":"Answer","text":"Metabase is pausing its next feature release to focus on weekly minor releases centered on security and observability, following a security incident and subsequent hardening update. The company stated this shift is a direct response to internal and external investigations into a vulnerability and its derivative issues, with third-party researchers from DOS, Ophion Security, and Anthropic credited for helping identify focus areas. Anyone weighing when to adopt a tool's new features versus stability can track this shift on daily.dev."}}]} ```