This is a mandatory security update. This release addresses a critical vulnerability and includes several important bug fixes related to tagging, the user interface, and configuration.
Critical: Privilege Escalation
This release patches a critical privilege escalation vulnerability. We would like to thank ENISA for reporting this issue. We strongly recommend all users upgrade their instances immediately.
Tagging
User Interface (UI)
Configuration
baseurl defined in config.json if the fullbaseurl is not set, improving configuration flexibility.sqlite3 dependency requirement has been corrected.We’re happy to announce the release of Cerebrate v1.29, bringing useful improvements to user management, tagging consistency, and query handling.
name field length to 255 characters, aligning with MISP compatibility.!=, ensuring more accurate filtering in CRUD operations.Release date: 2025-08-22
Meta Templates
Metafields in forms are now sorted based on their field property for better usability.
Version bump
Permissions
Added meta field editor permission to role view. Fixes #195.
RecordNotFoundException on invalid meta_template_field_id.MetaFieldsTable::isValidMetaField() to ensure missing references don’t cause unhandled exceptions.develop, main, 205).Thanks to all contributors for this release:
As always, thank you for your continued support and contributions to the Cerebrate project!
For a detailed list of changes, visit the Cerebrate GitHub repository.
]]>We are glad to announce the release of Cerebrate v1.26, which introduces new features, key improvements, and a host of fixes aimed at enhancing functionality and security. Here’s a breakdown of what’s new:
This release resolves numerous issues to improve system stability, usability, and security:
perm_community_admin value to resolve community admin role issues.info for improved clarity.We encourage all users to update to v1.26 to benefit from these enhancements and fixes.
Huge shoutout to @Wachizungu for his incredible contributions and attention to detail! 😎
As always, thank you for your continued support and contributions to the Cerebrate project!
For a detailed list of changes, visit the Cerebrate GitHub repository.
]]>We are excited to announce the release of Cerebrate v1.25! This update includes several new features, enhancements, and bug fixes to improve the overall experience.
main and develop branches to keep the codebase up-to-date.This release strengthens the stability and functionality of Cerebrate. Thanks to all contributors for their valuable input!
]]>Add/Edit endpoints have been updated to accept a simplified format of metafields for easier integration. Metafields are now passed as a list of objects with 4 required keys (field, value, template_uuid and template_version).
An example for adding a user, along with metafields set is as follows:
{
"individual": {
"email": "andras.iklody@circl.lu",
"first_name": "Andras",
"last_name": "Iklody"
},
"username": "andras.iklody@circl.lu",
"organisation_id": "2",
"role_id": "3",
"meta_fields": [
{
"field": "perm_misp",
"value": true,
"template_uuid": "447ded8b-314b-41c7-a913-4ce32535b28d",
"template_version": 2
}
]
}
Passing malformed data or not setting the proper media type headers resulted in rather arcane messages, complaining about certain validation errors / missing fields in the provided content. This lead to a fair bit of confusion, so from v1.24 on, if for whatever reason Cerebrate cannot pick up on the contents of a POST/PUT request, it will return a 400 warning the user about malformed / missing post bodies.
Thanks to Paweł Pawliński for testing the API and providing feedback!
In order to shed the frustrations that were up until now caused by org admins / group admins being able to create Individuals, but not to modify them after the fact, we have modified the behaviour altogether.
Having an alignment to the individual enabled org/group admins to modify individuals and as of v1.24, any individual created by one of them will automatically be aligned with their organisation. This should allow org/group admins to retain authoring right.
We have added a link to both Cerebrate-project’s website and the release notes of the current version to a small header text displayed at all times after login, also indicating the currently installed version for easier identification.
]]>[metafield editor permission] added. [iglocska]
[administration] allow group/org admins to edit individuals aligned to their managed orgs. [iglocska]
[permissions] split of admin and community admin. [iglocska]
[migration] minor fix for rerunability. [iglocska]
[version] bump. [iglocska]
[cleanup] removed older revision of upgrade script. [iglocska]
[metafield limitation] fixes. [iglocska]
[community admin] fixes. [iglocska]
[ACL component] fixes. [iglocska]
[extended logger] added. [iglocska]