yggvault ratatoskr-space connected via regular web
also available via yggdrasil mesh http://[203:b338:2a84:a18f:986:47ae:1a4:d8d3]/pkg/meilisearch/v1.47.1
vault / meilisearch / v1.47.1

meilisearch @ v1.47.1

integrity

size
20.3 MiB
downloaded
last checked
source https://github.com/meilisearch/meilisearch · available · github

release notes

Meilisearch v1.48.2 and Meilisearch v1.47.1 address CVE-2026-57823 and CVE-2026-57824. We recommend updating if you are in one of the following situations:

  1. You have API keys where indexes is not ["*"] and where actions contains more permissions than: ["search", "documents.*", "indexes.*", "tasks.cancel", "tasks.delete", "tasks.get", "settings.*", "stats.*", "fields.post"]
  2. You have search tenant tokens and either an embedder or a chat workspace

These versions both fix the following:

  1. CVE-2026-57824: Improper authentication leads to privilege escalation: an authenticated user with an index-scoped API and the appropriate set of actions could use global actions to read and write the global state of the Meilisearch instance. Possibly impacted users of Meilisearch Cloud were contacted ahead-of-time.
  2. CVE-2026-57823: Improper authentication leads to information disclosure: a user with a search tenant token could get some limited information about the existence of a document outside of the scope of the search rules attached to the tenant token, an indirect information about the content of the document.

We detected no trace of exploitation of these vulnerabilities.

We thank PuH4ck3rX for reporting these vulnerabilities :heart:

download

unix · zip
curl -fL -o v1.47.1.zip https://ratatoskr.space/pkg/meilisearch/v1.47.1.zip
                    printf '%s  %s\n' 'acf478f253b0e2b57621767bab875886a42fad241fa61222a16589b3127b1f47' 'v1.47.1.zip' | sha256sum -c -
windows · zip
$url = "https://ratatoskr.space/pkg/meilisearch/v1.47.1.zip"
$out = "v1.47.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "acf478f253b0e2b57621767bab875886a42fad241fa61222a16589b3127b1f47") { throw "sha256 mismatch" }
unix · tar.gz
curl -fL -o v1.47.1.tar.gz https://ratatoskr.space/pkg/meilisearch/v1.47.1.tar.gz
                    printf '%s  %s\n' 'a2c371d5d681fa2ff40ca8549fc3b150652242f1cb277b95afe79bbc721e6943' 'v1.47.1.tar.gz' | sha256sum -c -
windows · tar.gz
$url = "https://ratatoskr.space/pkg/meilisearch/v1.47.1.tar.gz"
$out = "v1.47.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a2c371d5d681fa2ff40ca8549fc3b150652242f1cb277b95afe79bbc721e6943") { throw "sha256 mismatch" }
download via yggdrasil mesh
unix · zip
curl -fL -o v1.47.1.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.47.1.zip
                    printf '%s  %s\n' 'acf478f253b0e2b57621767bab875886a42fad241fa61222a16589b3127b1f47' 'v1.47.1.zip' | sha256sum -c -
windows · zip
$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.47.1.zip"
$out = "v1.47.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "acf478f253b0e2b57621767bab875886a42fad241fa61222a16589b3127b1f47") { throw "sha256 mismatch" }
unix · tar.gz
curl -fL -o v1.47.1.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.47.1.tar.gz
                    printf '%s  %s\n' 'a2c371d5d681fa2ff40ca8549fc3b150652242f1cb277b95afe79bbc721e6943' 'v1.47.1.tar.gz' | sha256sum -c -
windows · tar.gz
$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.47.1.tar.gz"
$out = "v1.47.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a2c371d5d681fa2ff40ca8549fc3b150652242f1cb277b95afe79bbc721e6943") { throw "sha256 mismatch" }
artifact format size hashes
v1.47.1.zip zip 20.3 MiB
blake3-24 add048b7a35a9af9bae7a978e34a17f349e4449ecba65f43
sha256 acf478f253b0e2b57621767bab875886a42fad241fa61222a16589b3127b1f47
sha1 eaf2f4cb28aa2b8ddf8b612f1476416f2b0e4654
v1.47.1.tar.gz tar.gz 19.3 MiB
blake3-24 176b557430be8cb1ccf730268a63ec0fe1e79a54c7f7ca65
sha256 a2c371d5d681fa2ff40ca8549fc3b150652242f1cb277b95afe79bbc721e6943
sha1 350f8fcb3b54e6bbdf48aa83a7bfba09fa337d2c

install

bazel
http_archive(
    name = "meilisearch",
    urls = ["https://ratatoskr.space/pkg/meilisearch/v1.47.1.tar.gz"],
    integrity = "sha256-osNx1daB+i/0DKhUn8OxUGUiQvHLJ3uVr+ebvHIeaUM=",
    strip_prefix = "meilisearch-v1.47.1",
)
zig
.url = "https://ratatoskr.space/pkg/meilisearch/v1.47.1.tar.gz",
install via yggdrasil mesh
bazel
http_archive(
    name = "meilisearch",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.47.1.tar.gz"],
    integrity = "sha256-osNx1daB+i/0DKhUn8OxUGUiQvHLJ3uVr+ebvHIeaUM=",
    strip_prefix = "meilisearch-v1.47.1",
)
zig
.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.47.1.tar.gz",
← v1.48.2v1.48.1 →