LoginSign Up
← Back to all sparks
M

MISP

INFRA · APIS
Velocity2.5

Open-source threat intelligence and information sharing platform

www.misp-project.org ↗

MISP 2.5.51 is a quiet dependency cleanup after a long security run.

threat-intelligencesecurity-hardeningopen-sourcelegacy-deprecationdependencies
◆Current state
MISP 2.5.51 upgrades the otphp one-time-password library and removes the unused CakePHP 2 DebugKit from the codebase and Docker images, with no user-facing changes. It follows four releases that each shipped externally reported security fixes, and 2.5.47's PostgreSQL support and first AI-assisted analysis integration.
◆Where it's heading
After the September and October security-remediation releases, MISP is trimming dependencies while the Overmind UI migration continues. Removing legacy components fits the same direction as 2.5.50's deletion of old features.
◆Prediction
Expect the next feature release to continue Overmind migration and legacy removal; the entries do not show when more security fixes will land.

◆Recent moves

  1. 2d ago

    MISP 2.5.51 Released – Dependency Updates and Cleanup

    A maintenance release that updates the OTP library and drops an unused debugging dependency. A pause in the security-fix cadence rather than a change of direction.

    View source ↗
  2. 1mo ago

    MISP 2.5.50 Released - Security hardening, Overmind improvements, and streamlined workflows

    The hardening cycle continues with access-control and info-leak fixes, and Redis host settings move to CLI-only so a hijacked admin session can't redirect them. The bigger shift is removal: event discussions, legacy templates and signature allowedlists are migrated into analyst notes, event templates and warninglists, and the old code is deleted.

    View source ↗
  3. 1mo ago

    MISP 2.5.48: 20 vulnerabilities fixed, native XLSX export

    The third security release in three weeks closes 20 vulnerabilities plus 6 hardening changes. It also adds native XLSX export and tag removal from enrichment modules, and fixes sync bugs that silently dropped objects on receiving instances.

    View source ↗
  4. 1mo ago

    MISP 2.4.221: security backport for EOL branch

    The EOL 2.4 branch gets 57 security fixes from 2.5, and the project again urges users to move off it. It is a courtesy release, not new direction.

    View source ↗
  5. 1mo ago

    MISP 2.5.47: PostgreSQL support, AI analysis, 27 CVEs fixed

    ⚡ SPARK

    The pivotal release of the cycle: a large security round lands alongside PostgreSQL support and the first AI-assisted analysis integration. Later releases build on the hardening it started.

    View source ↗
  6. 2mo ago

    MISP 2.5.46 released - security hardening, major performance gains, knowledge-base updates and Overmind moving forward

    A security review plus major performance gains and a round of Overmind UI migration work. It set the pace for the September releases.

    View source ↗