What librenms/librenms shipped
Generated by FoxPlug from public activity — not affiliated with Librenms.
Week of September 14, 2026
What shipped
- Escaped default alert title definition to fix security vulnerability GHSA-9qcg-rgg9-mpjg. Pull request #20547
- Converted legacy API tokens to modern Sanctum tokens with backward compatibility for old format. Pull request #20528
- Added support for Palo Alto Networks Prisma SD-WAN ION appliances across 16 models. Pull request #20556
- Added SNR-OLT-GPON-16-2AC GPON OLT support with hardware, firmware, CPU, memory, temperature and transceiver discovery. Pull request #20558
- Added PoE power sensors for Netgear GS324TP with total budget and consumption reporting. Pull request #20480
- Health sensors widget now supports table mode with sorting by value and 100 entry hard cap. Pull request #20368
- Added complete Swedish translation covering all 27 PHP modules and JSON catalogue. Pull request #20167
- Replaced SnmpQueryMock with SnmprecSnmpBackend to read snmprec files directly with test optimizations. Pull request #20529
- Added error handling in Time::dateToMinutes() to catch malformed dates like those from APC UPS devices. Pull request #20577
- Fixed BGP peer discovery duplicates by setting context_name in OS-specific modules and adding migration. Pull request #20560
Why it matters
This week includes critical security fixes for alert titles and API token handling, expanded device support for Palo Alto and Netgear equipment, and modernized token authentication. The Swedish translation and improved test infrastructure also enhance the project's accessibility and development experience.
Changelog entry
- Security: Escaped default alert title definition (GHSA-9qcg-rgg9-mpjg) Pull request #20547
- Security: Sanitized user and group inputs in LDAP search filters Pull request #20542
- Security: Prevented directory traversal in nfsen channel parameter Pull request #20540
- Security: Escaped device displayName and sensor_descr in views Pull request #20539
- Security: Fixed oxidized XSS vulnerability Pull request #20538
- API: Converted legacy tokens to Sanctum with backward compatibility Pull request #20528
- Device: Added Palo Alto Networks Prisma SD-WAN ION support Pull request #20556
- Device: Added SNR-OLT-GPON-16-2AC GPON OLT support Pull request #20558
- Sensors: Added PoE power sensors for Netgear GS324TP Pull request #20480
- Sensors: Added Vertiv PDU GTHD temperature and humidity discovery Pull request #20567
- Widgets: Health sensors widget now supports table mode with sorting Pull request #20368
- UI: Improved custom maps with better zoom, dark mode, and mobile experience Pull request #20535
- Localization: Added complete Swedish translation Pull request #20167
- Fixes: Added error handling for malformed dates in Time::dateToMinutes() Pull request #20577
- Fixes: Fixed BGP peer discovery duplicates Pull request #20560
- Fixes: Fixed inventory loop due to duplicate index Pull request #20518
- Fixes: Device filter status down no longer affected by disable notify flag Pull request #20580
- Fixes: Fixed yaml snmpget exists checks comparison Pull request #20532
- Testing: Replaced SnmpQueryMock with SnmprecSnmpBackend for direct snmprec reading Pull request #20529
This week: security fixes for alert titles and LDAP injection, Palo Alto Prisma SD-WAN support, Netgear PoE sensors, Swedish translation, and API token modernization. Plus BGP duplicate fixes and improved error handling for malformed device data.
LibreNMS releases this week include important security updates addressing alert title escaping and LDAP filter sanitization, plus expanded device support for Palo Alto Networks Prisma SD-WAN ION and Netgear PoE switches. Major infrastructure improvements include modernized Sanctum-based API token handling with legacy support, a complete Swedish translation, and optimized SNMP test backend. Bug fixes address BGP peer duplicates, malformed date handling from UPS devices, and graph query parsing.