PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

More, Better, Faster: How we automate Metabase releases

metabase.com | blog | #rce | #supply-chain | #ci-cd | #metabase | #engineering | #jenkins | #security | #assessment | #release-automation
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

How we went from a manual Metabase release checklist to fully automated daily patch releases with GitHub Actions, reused test builds, and a three-click release UI
Published
Collected

Related coverage

blog · metabase.com
Making pivot tables faster with GROUPING SETS
Pivot tables used to require many queries and a lot of glue code to keep the totals consistent. Using SQL GROUPING SETS, we are now able to query the database for the whole pivot table at once.
blog · metabase.com
The bottleneck moved: how to build a semantic layer for AI Analytics
AI removed the querying bottleneck and created a verification one. Here's the semantic layer that makes AI-generated answers traceable, and how to build it.
blog · wiz.io
The Jenkins Threat Landscape
Wiz data: Jenkins runs in over a third of cloud environments; 59% have instances vulnerable to critical core flaws, 87% contain end-of-life versions, and 48% use highly privileged service accounts.
Critical · vulnerability · aikido.dev
Node2Shell Evolves to HTTP2Shell: Google Brotli Flaw (CVE-2026-111497) Affects HTTP Ecosystem
Brotli is ubiquitous across the modern HTTP ecosystem for web asset compression. Because the flaw allows unauthenticated remote code execution in both directions, any service or client automatically decompressing untrusted Brotli payloads is at critical risk until patched.
vulnerability · aikido.dev
Node2Shell: Node.js Brotli vulnerability allows remote code execution (CVE-2026-111497)
Node.js shipped a security update on Wednesday for a flaw in how it decompresses Brotli data, a bug people are already calling Node2Shell (CVE-2026-111497). If an attacker can get a malicious payload in front of your app, the flaw can crash the process, leak part of its memory, or potentially let them run their own code.
Critical · advisory · github.com
GHSA-9v8h-qqgm-4m35: Out-of-Bounds Write in Brotli Decoder ("Node2Shell") Affects Python & Node.js Ecosystems (CVE-2026-111497)
Because Brotli is ubiquitous across web servers, browsers, runtimes, and package registries, any application decompressing untrusted user-supplied payload with affected decoders is vulnerable to memory corruption or RCE.
Back