New CKAN releases have been announced, alongside an updated set of Docker images from Keitaro. CKAN 2.12.1 and 2.11.7 are security releases, so we strongly recommend upgrading as soon as possible. We have also published an image for CKAN 2.10.11, the latest release in the 2.10 series. If you need any support with the upgrades, just let us know.
Security Releases for CKAN 2.12 and 2.11
CKAN 2.12.1 and 2.11.7 were released on October 28, 2026. Both fix 7 security vulnerabilities, including:
- an unauthenticated SQL injection in
datastore_search - a forgeable user login
- exposure of private dataset identifiers through
member_listand Solr parameters - a permission check bypass in
resource_view_update - stored and reflected XSS in the DataTables view and
webpage_view
CKAN 2.12.1 includes 13 bug fixes. Details are included in the v2.12.1 Changelog.
CKAN 2.11.7 includes 2 minor changes and 12 bug fixes. HTML cleaning is now done with nh3 instead of bleach, and datastore_search_sql input is sanitized with pglast instead of sqlparse. Our images already include the updated requirements, so no extra steps are needed. Details are included in the v2.11.7 Changelog.
If you are upgrading from CKAN 2.11.5, the new image also includes everything from CKAN 2.11.6, which fixed 8 more security issues. Details are included in the v2.11.6 Changelog.
One change to be aware of in both releases: resource views that use the iframed: True setting can no longer be previewed in the resource view form.
New Patch Release for CKAN 2.10
CKAN 2.10.11 includes 14 bug fixes, 8 of them security fixes. Details are included in the v2.10.11 Changelog.
The CKAN project now officially supports only CKAN 2.11 and 2.12, and CKAN 2.10.11 does not include the October security fixes. If you are still running CKAN 2.10, we recommend planning an upgrade to 2.11 or 2.12.
The new 2.10 image also fixes an issue in our 2.10.10 image where the bundled envvars and xloader extensions failed to load.
Upgrade Today
If you’re ready to install the new releases on your CKAN portal, you can do so immediately. Feel free to use Keitaro’s Docker images, available on Docker Hub and the GitHub Container Registry:
docker pull keitaro/ckan:2.12.1docker pull keitaro/ckan:2.11.7docker pull keitaro/ckan:2.10.11
or
docker pull ghcr.io/keitaroinc/ckan:2.12.1docker pull ghcr.io/keitaroinc/ckan:2.11.7docker pull ghcr.io/keitaroinc/ckan:2.10.11
Our docker-ckan repository also includes a ready-to-use docker-compose setup if you want to spin up a full CKAN stack (CKAN, workers, PostgreSQL, Solr and Redis) in just a few commands.
About CKAN
The Comprehensive Knowledge Archive Network (CKAN) is the world’s leading open-source data management system. It is a powerful data portal platform. Governments, research institutions, and other organizations widely use it. They collect lots of data and want to make their data accessible and available to others, especially the general public.
Keitaro is a prominent and active contributor to the global CKAN Association, the organization that manages the CKAN global footprint. Our CKAN team has worked on over 50 successful CKAN projects. They have developed numerous custom extensions. All of these are open source and can be found on our GitHub page.
