yggvault ratatoskr-space connected via regular web
also available via yggdrasil mesh http://[203:b338:2a84:a18f:986:47ae:1a4:d8d3]/pkg/meilisearch/v1.48.2
vault / meilisearch / v1.48.2

meilisearch @ v1.48.2

integrity

size
20.3 MiB
downloaded
last checked
source https://github.com/meilisearch/meilisearch · available · github

release notes

Meilisearch v1.48.2 and Meilisearch v1.47.1 address CVE-2026-57823 and CVE-2026-57824. We recommend updating if you are in one of the following situations:

  1. You have API keys where indexes is not ["*"] and where actions contains more permissions than: ["search", "documents.*", "indexes.*", "tasks.cancel", "tasks.delete", "tasks.get", "settings.*", "stats.*", "fields.post"]
  2. You have search tenant tokens and either an embedder or a chat workspace

These versions both fix the following:

  1. CVE-2026-57824: Improper authentication leads to privilege escalation: an authenticated user with an index-scoped API and the appropriate set of actions could use global actions to read and write the global state of the Meilisearch instance. Possibly impacted users of Meilisearch Cloud were contacted ahead-of-time.
  2. CVE-2026-57823: Improper authentication leads to information disclosure: a user with a search tenant token could get some limited information about the existence of a document outside of the scope of the search rules attached to the tenant token, an indirect information about the content of the document.

We detected no trace of exploitation of these vulnerabilities.

We thank PuH4ck3rX for reporting these vulnerabilities :heart:

download

unix · zip
curl -fL -o v1.48.2.zip https://ratatoskr.space/pkg/meilisearch/v1.48.2.zip
                    printf '%s  %s\n' '91a4a5f02c2194c0fc6574d8ee159bf103b244fbb34e9b0b178e081ee100282b' 'v1.48.2.zip' | sha256sum -c -
windows · zip
$url = "https://ratatoskr.space/pkg/meilisearch/v1.48.2.zip"
$out = "v1.48.2.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "91a4a5f02c2194c0fc6574d8ee159bf103b244fbb34e9b0b178e081ee100282b") { throw "sha256 mismatch" }
unix · tar.gz
curl -fL -o v1.48.2.tar.gz https://ratatoskr.space/pkg/meilisearch/v1.48.2.tar.gz
                    printf '%s  %s\n' '7a315c4d19163b6906d8b038a798689d962c2033a036896f0d6b4cacbb3bd4d3' 'v1.48.2.tar.gz' | sha256sum -c -
windows · tar.gz
$url = "https://ratatoskr.space/pkg/meilisearch/v1.48.2.tar.gz"
$out = "v1.48.2.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "7a315c4d19163b6906d8b038a798689d962c2033a036896f0d6b4cacbb3bd4d3") { throw "sha256 mismatch" }
download via yggdrasil mesh
unix · zip
curl -fL -o v1.48.2.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.48.2.zip
                    printf '%s  %s\n' '91a4a5f02c2194c0fc6574d8ee159bf103b244fbb34e9b0b178e081ee100282b' 'v1.48.2.zip' | sha256sum -c -
windows · zip
$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.48.2.zip"
$out = "v1.48.2.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "91a4a5f02c2194c0fc6574d8ee159bf103b244fbb34e9b0b178e081ee100282b") { throw "sha256 mismatch" }
unix · tar.gz
curl -fL -o v1.48.2.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.48.2.tar.gz
                    printf '%s  %s\n' '7a315c4d19163b6906d8b038a798689d962c2033a036896f0d6b4cacbb3bd4d3' 'v1.48.2.tar.gz' | sha256sum -c -
windows · tar.gz
$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.48.2.tar.gz"
$out = "v1.48.2.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "7a315c4d19163b6906d8b038a798689d962c2033a036896f0d6b4cacbb3bd4d3") { throw "sha256 mismatch" }
artifact format size hashes
v1.48.2.zip zip 20.3 MiB
blake3-24 1e0097ec0f34a72cabbcb66372f25699f9229b2ccd66d276
sha256 91a4a5f02c2194c0fc6574d8ee159bf103b244fbb34e9b0b178e081ee100282b
sha1 a8d01643256705b7aba220b1817a58841a8c36c7
v1.48.2.tar.gz tar.gz 19.3 MiB
blake3-24 d0b8aaab7021392a20f6e877a1e9d132a4925e0b7c5fb1b6
sha256 7a315c4d19163b6906d8b038a798689d962c2033a036896f0d6b4cacbb3bd4d3
sha1 935ba04c99aac2f57789605bfd805b825943d6b0

install

bazel
http_archive(
    name = "meilisearch",
    urls = ["https://ratatoskr.space/pkg/meilisearch/v1.48.2.tar.gz"],
    integrity = "sha256-ejFcTRkWO2kG2LA4p5honZYsIDOgNolvDWtMrLs71NM=",
    strip_prefix = "meilisearch-v1.48.2",
)
zig
.url = "https://ratatoskr.space/pkg/meilisearch/v1.48.2.tar.gz",
install via yggdrasil mesh
bazel
http_archive(
    name = "meilisearch",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.48.2.tar.gz"],
    integrity = "sha256-ejFcTRkWO2kG2LA4p5honZYsIDOgNolvDWtMrLs71NM=",
    strip_prefix = "meilisearch-v1.48.2",
)
zig
.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.48.2.tar.gz",
← v1.48.3v1.47.1 →