CVE-2026-45447 | ArxDecoded

Hasura GraphQL Engine v2.45.6 updates OpenSSL to address CVE‑2026‑45447

August 25, 2026

Hasura released the v2.45.6 patch for its GraphQL Engine, upgrading the OpenSSL package in the Ubuntu base image to remediate the heap use‑after‑free vulnerability CVE‑2026‑45447.

Hasura GraphQL Engine v2.49.3 adds event‑processing toggle and patches critical OpenSSL vulnerability

August 25, 2026

Hasura released v2.49.3, a patch that introduces the HASURA_GRAPHQL_DISABLE_EVENT_PROCESSING flag to stop background event pollers, upgrades enterprise data‑connector components, and updates the Docker base image to fix CVE‑2026‑45447 (an OpenSSL heap use‑after‑free).