Uptime Kuma 2.5.9 released on 31-10-2026
Uptime Kuma 2.5.9 is out now. It’s a stability and security-focused release that fixes a number of monitoring and UI refresh bugs and patches a critical RSS cache‑poisoning vulnerability, so it’s recommended for all users.
See the project on GitHub for the full changelog and upgrade instructions.
What’s in this release
- Targeted bug fixes improving monitoring correctness and the UI: correct runtime timeout units, reset push-monitor retry counters from the last stored heartbeat, remove a duplicated refresh timer on the status page, and display recurring maintenance windows in the monitor’s configured timezone (credit: @kuxiaowo).
- Security: fixes GHSA-86ch-2247-gr56 by addressing an RSS cache‑poisoning issue and migrating caching behaviour to http-cache-semantics.
- Dependency and maintenance updates, including removal of the outdated apicache package and general dependency updates (chore #8050, related work #8080).
Upgrade notes
- Cache migration: apicache has been dropped and caching is migrated to http-cache-semantics — review the related changes (chore #8080) if you have custom caching integrations before upgrading.
- Recommended for all users to obtain the security and stability improvements; if you encounter issues, revert to your previous release while you investigate.
Share any feedback or issues you see after upgrading — it helps the maintainers and the wider community keep monitoring reliable.
