meilisearch @ v1.33.1

integrity

size: 20.0 MiB
downloaded: 2026-07-04 06:55 UTC
last checked: 2026-07-04 06:55 UTC

source https://github.com/meilisearch/meilisearch · available · github

release notes

In Meilisearch v1.33.1, we released a security fix that affected the dump import, improvements to vector store relevance in massive databases, and a fix related to ranking scores.

🔐 Security Fix

Cloud users: you don't need to do anything. We found no evidence of exploitation of this vulnerability on Meilisearch Cloud.
Open-source users: if you allow importing dumps from an untrusted source, we recommend you update to v1.33.1

All versions of Meilisearch before v1.33.0 are vulnerable to a path traversal vulnerability involving the dump import functionality.

Importing a specially crafted dump could result in giving access to the Meilisearch instance to arbitrary, specifically formatted files, present on the file system of the Meilisearch instance.

✨ Enhancements

We updated the vector store to trigger linear scanning even on bigger databases, leading to improved performance and so better result quality when the search cutoff is reached. This applies in particular when the number of filtered candidates is small relative to the number of documents in the index by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6113.

🐛 Bug Fixes

We fixed a bug where only the first non-blocking buckets were taken for the non-final ranking rules. This improves the quality of search results when the search cutoff triggers, especially when vector search and a sort are involved by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6113.

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.33.0...v1.33.1

download

unix · zip

curl -fL -o v1.33.1.zip https://ratatoskr.space/pkg/meilisearch/v1.33.1.zip
                    printf '%s  %s\n' '7b699f9e69513245f348e1d706db29660f7c11a3c64db6dc7b731310bb2cac55' 'v1.33.1.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/meilisearch/v1.33.1.zip"
$out = "v1.33.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "7b699f9e69513245f348e1d706db29660f7c11a3c64db6dc7b731310bb2cac55") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.33.1.tar.gz https://ratatoskr.space/pkg/meilisearch/v1.33.1.tar.gz
                    printf '%s  %s\n' 'dc98e3bcb0f22827f5db7e699ddfb659b366737c89482f4e6898937cf0ddf365' 'v1.33.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/meilisearch/v1.33.1.tar.gz"
$out = "v1.33.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "dc98e3bcb0f22827f5db7e699ddfb659b366737c89482f4e6898937cf0ddf365") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.33.1.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.33.1.zip
                    printf '%s  %s\n' '7b699f9e69513245f348e1d706db29660f7c11a3c64db6dc7b731310bb2cac55' 'v1.33.1.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.33.1.zip"
$out = "v1.33.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "7b699f9e69513245f348e1d706db29660f7c11a3c64db6dc7b731310bb2cac55") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.33.1.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.33.1.tar.gz
                    printf '%s  %s\n' 'dc98e3bcb0f22827f5db7e699ddfb659b366737c89482f4e6898937cf0ddf365' 'v1.33.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.33.1.tar.gz"
$out = "v1.33.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "dc98e3bcb0f22827f5db7e699ddfb659b366737c89482f4e6898937cf0ddf365") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.33.1.zip	zip	20.0 MiB	blake3-24 7f7a3dcf02450175dede82374d3e7847e07b706a982b4072 sha256 7b699f9e69513245f348e1d706db29660f7c11a3c64db6dc7b731310bb2cac55 sha1 fbb917fe6ebe44fdcfcb0917bfe7fee5d3b29d40
v1.33.1.tar.gz	tar.gz	19.1 MiB	blake3-24 b532bbdfda292818816ae70d6af02e9d3bacd0c7ea847a5a sha256 dc98e3bcb0f22827f5db7e699ddfb659b366737c89482f4e6898937cf0ddf365 sha1 2bd065839ad844995ba29a4a27f91871df527e96

install

bazel

http_archive(
    name = "meilisearch",
    urls = ["https://ratatoskr.space/pkg/meilisearch/v1.33.1.tar.gz"],
    integrity = "sha256-3JjjvLDyKCf1235pnd+2WbNmc3yJSC9OaJiTfPDd82U=",
    strip_prefix = "meilisearch-v1.33.1",
)

zig

.url = "https://ratatoskr.space/pkg/meilisearch/v1.33.1.tar.gz",

install via yggdrasil mesh

bazel

http_archive(
    name = "meilisearch",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.33.1.tar.gz"],
    integrity = "sha256-3JjjvLDyKCf1235pnd+2WbNmc3yJSC9OaJiTfPDd82U=",
    strip_prefix = "meilisearch-v1.33.1",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/meilisearch/v1.33.1.tar.gz",

← v1.34.0 v1.33.0 →