Hi everyone,
We’ve just released ServiceControl 6.21.3. This release updates the integrated ServicePulse to ServicePulse 2.12.1, updates the .NET runtime to the October 2026 security release, and removes unused libraries from the Windows installer.
Dependency CVEs
- #6000 GitHub Security Advisory ID (GHSA-2fmv-rv2c-59x7) reported on branch release-6.21
- #6001 GitHub Security Advisory ID (GHSA-846f-f764-76mx) reported on branch release-6.21
Improvements/Features
- #6033 Update Particular.ServicePulse.Core to 2.12.1
- #6017 .NET October 2026 Updates
- #6018 Windows installer packages unused Kafka client libraries that include a vulnerable libcurl
[!IMPORTANT]
Please read ServicePulse 2.12.1 – Patch release available for details about the issues fixed in ServicePulse 2.12.1
How to know if you are affected
You are affected by the issue fixed in ServicePulse 2.12.1 if you use the ServicePulse integrated into ServiceControl 6.21.0 through to 6.21.2, with OIDC authentication enabled, and you open a ServicePulse deep link in a tab that needs to sign in.
Symptoms
Opening a deep link in integrated ServicePulse, without a valid authenticated session, completes OIDC authentication but does not return the user to the requested page. With the default configuration, the dashboard opens instead.
When to upgrade
You should upgrade immediately if you are affected by the issue fixed in ServicePulse 2.12.1. Otherwise, you should upgrade during your next maintenance window.
Where to get it
You can download the new version of ServiceControl from our website or Docker Hub.
Please read our support policy for more details.
With thanks,
The team in Particular