Uptime Kuma 2.5.4 released on 11-09-2026
Uptime Kuma 2.5.4 is out now. It adds three notification providers (Signalgrid, Notify!, Amoot SMS) and a new SFTP monitor supporting both password and private-key authentication, broadening alerting options and enabling direct SFTP health checks.
Check Uptime Kuma’s GitHub release for the full changelog, upgrade instructions and the original release notes.
What’s in this release
- Three new notification providers: Signalgrid, Notify! and Amoot SMS (PRs #7801, #7740, #7719).
- New SFTP monitor type with password and private-key authentication for direct SFTP checks (PR #7034).
- Usability, bug and translation updates including a login hide/show password toggle, multiple stability fixes and a security update bumping jsonata to 2.2.2 to address CVE-2026-77415 (PRs #7672, #7820, #7787, #7739, #7718, #7690, #7838, #7812).
Upgrade notes
- Install 2.5.4 to receive security fixes: jsonata has been bumped to 2.2.2 to remediate CVE-2026-77415 and a reported DoS weakness has been addressed (PR #7838). Follow the project’s GitHub release for exact upgrade steps.
- No breaking changes are listed in the release notes; consult the GitHub release for any platform-specific instructions before upgrading.
If you try version 2.5.4, share your experience on the project’s GitHub—reports on the new notification providers and the SFTP monitor will help maintainers and contributors.
