VictoriaMetrics / update detail

v1.136.18

Official VictoriaMetrics changelog summary with source attribution, release tags, and community reactions.

Track this VictoriaMetrics release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

VictoriaMetrics·Sep 14, 2026, 10:36 AMFixSecurity-relevantAI-assisted summary

Summary

Upgrade Go builder to 1.26.7 and properly escape server‑side errors to prevent XSS on the relabeling UI.
Hide sensitive header values (e.g., Authorization, API keys) in startup logs, /metrics, and /flags.
Fix insert request hangs after timeouts and correct metric status aggregation across vmstorage nodes.

securitybugfixsource healthy

Official source Last checked Sep 20, 2026, 1:01 PM

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Sep 20, 2026, 1:01 PM

related channels

Turn this VictoriaMetrics release note into a weekly digest for the tools you actually use.