You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@syncope.apache.org by "Francesco Chicchiriccò (Confluence)" <no...@apache.org> on 2026/09/14 09:00:00 UTC
[CONF] Apache Syncope > Notturno

There's **1 new edit** on this page  
---  
|  
---  
|  | [![page icon](cid:page-
icon)](https://cwiki.apache.org/confluence/spaces/SYNCOPE/pages/334760997/Notturno?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400634&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view
"page icon")  
---  
[Notturno](https://cwiki.apache.org/confluence/spaces/SYNCOPE/pages/334760997/Notturno?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400634&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view
"Notturno")  
|  |  |  |  |
![](cid:avatar_961a48ca7baf89d280ef1d6114c79341d6961de9095a5b511f196ccf7ee159a4)
|  | Francesco Chicchiriccò edited this page  
---  
|  
|  | Here's what changed:  
---  
|

...

Check the [Reference Guide](https://syncope.apache.org/docs/4.0/reference-
guide.html#production-mode).

## Security

  * CVE-2026-73178
  * CVE-2026-73191
  * CVE-2026-73195
  * CVE-2026-73236
  * CVE-2026-73370
  * CVE-2026-73470
  * CVE-2026-73579
  * CVE-2026-73668
  * CVE-2026-75015
  * CVE-2026-75030
  * CVE-2026-77051
  * CVE-2026-77147
  * CVE-2026-77181
  * CVE-2026-77883
  * CVE-2026-78318
  * CVE-2026-78330
  * CVE-2026-78336
  * CVE-2026-82232
  * CVE-2026-86460
  * CVE-2026-87779
  * CVE-2026-87785
  * CVE-2026-87802

## Changelog

### Bug

  * [[SYNCOPE-1989](https://issues.apache.org/jira/browse/SYNCOPE-1989)] - Dark theme display issues

...

  * Spring Framework 6.2.18 → 6.2.19
  * Apache CXF 4.1.6 → 4.1.7
  * ConnId 
    * Base: 1.6.1.0 → 1.6.1.1
    * REST: 1.1.1 → 1.1.2
    * DB: 2.4.1 → 2.4.2

## Security

  * CVE-2026-63071
  * CVE-2026-62418
  * CVE-2026-62183
  * CVE-2026-57308
  * CVE-2026-53421
  * CVE-2026-53405

...

  * Spring Framework 6.2.17 → 6.2.18
  * Apache CXF 4.1.5 → 4.1.6
  * Apereo CAS Client 4.0.4 → 4.1.0

## Security

  * [CVE-2026-42797](https://syncope.apache.org/security#CVE-2026-42797.3A_Apache_Syncope.3A_JexlContextBuilder_Information_Disclosure)

  * [CVE-2026-42782](https://syncope.apache.org/security#CVE-2026-42782.3A_Apache_Syncope.3A_Post-auth_RCE_via_Groovy_static)

  * [Apereo CAS Client JWT Vulnerability](https://apereo.github.io/2026/05/20/casc-jwt-vuln/)

...

  * Spring Boot 3.4.12 → 3.4.13

## Security

  * [CVE-2026-23794](https://syncope.apache.org/security)
  * [CVE-2026-23795](https://syncope.apache.org/security)

...

  * Spring Boot 3.4.10 → 3.4.12
  * Apache CXF 4.1.3 → 4.1.4

## Security

  * [CVE-2025-65998](https://syncope.apache.org/security)

## New and noteworthy

...

  * Spring Boot 3.4.8 → 3.4.10
  * Spring Cloud Gateway 4.2.4 → 4.2.6
  * Apereo CAS 7.2.5 → 7.2.7
  * ConnId 1.6.0.1 → 1.6.1.0
  * ConnId REST connector 1.1.0 → 1.1.1
  * ConnId DB connector 2.4.0 → 2.4.1

## Security

  * [CVE-2025-57738](https://syncope.apache.org/security)
  * <https://apereo.github.io/2025/09/25/oauth-oidc-vuln/>

...  
  
---  
|  |  | [Go to page
history](https://cwiki.apache.org/confluence/pages/viewpreviousversions.action?pageId=334760997&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400634&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9 "Go to page
history")  
---  
---  
| [View
page](https://cwiki.apache.org/confluence/spaces/SYNCOPE/pages/334760997/Notturno?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400634&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=view)  
---  
  
|  | [Stop watching
space](https://cwiki.apache.org/confluence/users/removespacenotification.action?spaceKey=SYNCOPE&src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400634&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=stop-
watching&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ4c3JmOjhhYTk4MDg3NGUzNmExZWIwMTRlMzZhMmM0MTY3OWI5IiwicXNoIjoiZTgwNjI1ZGYzYjc2ZDk3ZjBkY2RhMGNkMzYxMDBiNjE2NTU5NzE4NGJhMTlmMmVlZTgyZmZjMTk2Zjc5YTM1ZSIsImlzcyI6ImNvbmZsdWVuY2Vfbm90aWZpY2F0aW9uc0FSRUgtWFVEMS1QT1FHLUNTQU8iLCJleHAiOjE3ODk5ODEyMDAsImlhdCI6MTc4OTM3NjQwMH0.pBK5eydvvNFqel6RkvkSQDsiW0D79JiHKQmpxFFkG-Q)
| •  
---|---  
[Manage
notifications](https://cwiki.apache.org/confluence/users/editmyemailsettings.action?src=mail&src.mail.product=confluence-
server&src.mail.timestamp=1789376400634&src.mail.notification=com.atlassian.confluence.plugins.confluence-
notifications-batch-plugin%3Abatching-
notification&src.mail.recipient=8aa980874e36a1eb014e36a2c41679b9&src.mail.action=manage)  
---  
| ![Confluence logo big](cid:footer-desktop-logo)  
---  
This message was sent by Atlassian Confluence 9.2.21  
![](cid:footer-mobile-logo)  
---