# KServe v0.21.0

> AI & ML · 2026-09-25

A feature-rich release expands LLMInferenceService, autoscaling, routing, storage, tracing, and installation support, alongside correctness fixes and dependency updates. Potentially breaking migrations and dependency changes warrant review before upgrading.

## Action needed
- **[security · high]** `black` 26.3.1 update for CVE-2026-32274
  - `black` was updated to 26.3.1 in this release to address CVE-2026-32274.
- **[security · high]** `go-jose/go-jose/v4` v4.1.4 update for GHSA-78h2-9frx-2jm8
  - `go-jose/go-jose/v4` was updated to v4.1.4 in this release to address GHSA-78h2-9frx-2jm8.
- **[security · high]** `Pillow` minimum version 12.2.0 for CVE-2026-40192 and GHSA-whj4-6x5x-4v2j
  - `Pillow` was upgraded to >=12.2.0 in this release to address CVE-2026-40192 and GHSA-whj4-6x5x-4v2j.
- **[security · high]** `Pillow` minimum version 12.3.0 for CVE-2026-54058
  - `Pillow` was updated to >=12.3.0 in this release to address CVE-2026-54058.
- **[security · high]** `cryptography` minimum version 50.0.0 for CVE-2026-69247
  - `cryptography` was updated to >=50.0.0 in this release to address CVE-2026-69247.
- **[security · high]** `pyasn1` 0.6.4 update for CVE-2026-59885
  - `pyasn1` was updated to 0.6.4 in this release to address CVE-2026-59885.
- **[security · high]** `urllib3` minimum version 2.6.3 for CVE-2026-21441
  - `urllib3` was pinned to >=2.6.3 in this release to address CVE-2026-21441.

## Check if affected
- **[security · critical]** `golang.org/x/crypto` v0.52.0 update in `bgtest`
  - Applies if you use `bgtest`.
  - `golang.org/x/crypto` was updated to v0.52.0 in `bgtest` to address CVE-2026-46595.
- **[security · high]** `Pillow` 12.3.0 update in `alibiexplainer`
  - Applies if you use `alibiexplainer`.
  - `Pillow` was updated to 12.3.0 in `alibiexplainer` to address CVE-2026-59200.
- **[security · high]** `opentelemetry-go` v1.43.0 update in `qpext`
  - Applies if you use `qpext`.
  - `opentelemetry-go` was updated to v1.43.0 in `qpext` to address CVE-2026-39883.
- **[security · high]** `setuptools` 78.1.1 update in `python/kserve`
  - Applies if you use `python/kserve`.
  - `setuptools` was updated to 78.1.1 in `python/kserve` to address CVE-2025-47273.
- **[security]** `aiohttp` 3.13.3 update in `python/storage`
  - Applies if you use `python/storage`.
  - `aiohttp` was updated to 3.13.3 in `python/storage` to address the zip bomb denial-of-service issue.
- **[breaking]** The old `disagg-sidecar` flag, removed
  - Applicability is not stated in the release notes.
  - The old flag for `disagg-sidecar` was dropped to support the new TLS flag in the LLMInferenceService changes.
- **[breaking]** The deprecated LLMInferenceService plugin, removed
  - Applicability is not stated in the release notes.
  - The deprecated plugin was removed from the LLMInferenceService changes.
- **[breaking]** The LLMInferenceService flag, renamed
  - Applicability is not stated in the release notes.
  - A flag was renamed in the LLMInferenceService changes.

## Other recorded changes
- 89 (defect_corrected 36, added 21, value_changed 19, constraint_changed 10, removed 1, renamed 1, default_changed 1)

[Full analysis](https://ratatosk.io/en/releases/kserve/v0.21.0)

[Original release notes](https://github.com/kserve/kserve/releases/tag/v0.21.0)