# Litmus 3.33.0

> Observability · 2026-10-15

A maintenance release with correctness fixes, dependency updates, and a `Go` security update. The `CUSTOM_TLS_CERT` setting now belongs in the subscriber secret instead of subscriber config.

## Action needed
- **[security]** Vulnerable transitive npm dependencies
  - Vulnerable transitive `npm` dependencies are updated in the release.
- **[security]** The `Go` version and CVE fix
  - The `Go` version is updated and a CVE is fixed in the release.

## Check if affected
- **[breaking]** The `CUSTOM_TLS_CERT` setting, moved to subscriber secret
  - Applies if `CUSTOM_TLS_CERT` is set.
  - `CUSTOM_TLS_CERT` moves from subscriber config to subscriber secret.

## Other recorded changes
- 11 (defect_corrected 10, value_changed 1)

[Full analysis](https://ratatosk.io/en/releases/litmus/3.33.0)

[Original release notes](https://github.com/litmuschaos/litmus/releases/tag/3.33.0)