Plausible v3.2.1 patches critical RCE vulnerability

// 2h agoSECURITY INCIDENT

Plausible v3.2.1 patches critical RCE vulnerability

ANNOUNCEMENT PRODUCT GITHUB PRODUCT HUNT

Plausible Analytics drops v3.2.1 to address a remote code execution vulnerability in the Storybook endpoint affecting self-hosted versions 3.0.0+. The update also introduces strict order funnels and upgrades the backend to Elixir 1.19.

// ANALYSIS

The v3.2.1 update is a critical "stop everything and patch" moment for self-hosted Plausible users due to a remote code execution vulnerability in the exposed Storybook endpoint. While the release also adds strict order funnels for path analysis and migrates the backend to Elixir 1.19 for better performance, the security fix is the primary driver for immediate manual intervention by Community Edition admins.

// TAGS

plausible-analyticsanalyticsopen-sourceself-hosteddevtoolsecurityelixirobservability

DISCOVERED

2h ago

2026-05-17

PUBLISHED

2h ago

2026-05-17

RELEVANCE

6/ 10

// KEEP READING

More AI developer news from the feed

EXPLORE FULL FEED

BENCHMARK44m ago

Hermes Agent leads autonomous agent tests

Hermes Agent demonstrates its self-improving "closed learning loop" in a new benchmark comparison of leading autonomous frameworks. The system distinguishes itself through deep persistence and the ability to autonomously author reusable skills from experience.

RESEARCH44m ago

HERCULEAN benchmark reveals agent financial coordination gap

A new MCP-based benchmark evaluates AI agents on end-to-end professional financial workflows rather than static tasks. Initial results indicate that while agents handle basic trading, they fail at long-horizon coordination required for auditing and hedging.

UPDATE2h ago

Ghost publishing platform adds built-in theme editor

The open-source Node.js publishing platform Ghost continues to iterate on its v6 release, introducing built-in theme editing and migrating to pnpm. The platform remains a robust, zero-fee alternative to Substack for independent newsletters and memberships.