Version 8.2.10

Version Highlights

Release Date: 18 May 2026
Editions: All Editions, Enterprise & Cloud Editions
Focus Areas: Bug fixes, security upgrades, dependency updates, and UI consistency

Core Enhancements

Improvements to Joget's core features, including Builders, APIs, and overall platform performance.

• Added capability to allow CustomBuilders to process BuilderDefinitions during app cloning.

Theme-Specific Fixes

Updates and fixes related to themes, ensuring better UI consistency and user experience.

• Resolved visibility issues for design icons, square icons, and arrows in the Tree Viewer and X-ray tabs under the dark theme.
• Fixed the arrow button color and standardized arrow directions when expanding and collapsing in the Tree Viewer and Usage tabs.
• Added background colors for the Authorized and Unauthorized sections in the Permission Table for the dark theme.
• Fixed an issue where the export column background displayed as white in the dark theme.
• Adjusted the opacity of the Permission tab table row color so the hover color displays correctly.
• Fixed the sidebar menu background active color from failing to apply correctly in the Color Admin Theme and DX8 Angle Theme.
• Added missing dark theme CSS to Permission Tab elements and Usages Tab item content.

Bug Fixes and Improvements

List of bugs resolved in this release, along with general performance and stability improvements.

• Cleared the hash variable plugin cache after form submission to prevent stale data issues.
• Replaced non-thread-safe collections with concurrent utilities, and replaced ReentrantReadWriteLock with ReentrantLock to resolve deadlock issues during plugin caching.
• Resolved a component key mismatch during user ID retrieval from the migrationAssignmentUserList ThreadLocal.
• Fixed a failure to retrieve columns when a field name in the form is labeled as a single digit.
• Added defensive copy and null value handling to SetupManagerCache to improve cache consistency.
• Resolved an issue where users were unable to create a new process with the Add New button.
• Fixed an issue where custom CSS in system settings was HTML-escaped, breaking selectors with special characters.
• Corrected the common table prefix logic to only check for the exact prefix table name.
• Added handling for missing files and proper error message displays in FileUpload and ImageUpload.
• Added handling for null processIds values in the getUserTodayReplacedBy query for Oracle databases.
• Fixed inconsistent appId population in wf_audit_trail for Authentication and System Activities.
• Fixed a deletion error in nested grids within the GridInnerDataStoreBinderWrapper.
• Updated the fixUnclosedTags method to retain only body content and disable pretty print.
• Fixed the Property Assistant icon failing to be visible.
• Resolved a potential deadlock in MultiTenantPluginManager by replacing refresh() with installBundles().
• Fixed broken links within the Generator.

Plugin Improvements

Enhancements to plugins, plugin management, and plugin development for greater flexibility and stability.

• Fixed a 404 error and JavaScript console errors when uploading files via the Spreadsheet plugin.
• Fixed an issue where the Ajax Subform plugin would not load when the Parent field used to keep the subform ID was empty.
• Updated the Handsontable license key for 2026-2027 in the Spreadsheet plugin.

Build & Dependencies

Updated components and dependencies within Joget, including third-party libraries and internal modules.

• Upgraded Log4j dependencies to version 2.25.4.
• Updated canvg.js to version 3.0.11.

Security Updates

Critical patches and security-related improvements.

• Prevented host spoofing on multi-tenant environments.
• Upgraded Apache Tomcat to version 9.0.117 to address CVE-2026-34486.

Enterprise & Cloud Specific

Fixes and improvements specific to Enterprise and Cloud editions.
Note: All Community edition updates are automatically included in Enterprise and Cloud.

• Upgraded Apache Tomcat to 9.0.117 and prevented host spoofing for Enterprise multi-tenant environments.
• Resolved a potential deadlock issue for Cloud workflows.
• Fixed the DX8 Angle Theme sidebar menu background color issue.
• Upgraded Log4j dependencies in cloud-install and wflow-enterprise-install.
• Fixed file upload errors in Spreadsheet and missing file handling in ImageUpload Enterprise plugins.
• Fixed Ajax Subform loading issues.
• Fixed broken links in the Enterprise Generator.

Full Changelogs

Bug Fixes and Improvements

All Editions

[ FIXED ]      CORE     : jw-community - Security - Prevent host spoofing on multi tenant environment. 
[ FIXED ]      CORE     : wflow-core - AppServiceImpl - Clear hash variable plugin cache after form submission to prevent stale data issues. 
[ FIXED ]      CORE     : wflow-core - Multi Tools - Prevent stale data from being served to subsequent plugins due to request-level caching.  
[ FIXED ]      CORE     : wflow-wfengine - WorkflowManagerImpl - Component key mismatch during user ID retrieval from migrationAssignmentUserList ThreadLocal.  
[ FIXED ]      CORE     : jw-community - Security - Upgraded Apache Tomcat to 9.0.117 to address CVE-2026-34486. 
[ FIXED ]      CORE     : wflow-plugin-base - PluginManager - Replaced ReentrantReadWriteLock with ReentrantLock to resolve deadlock issues during plugin caching. 
[ FIXED ]      CORE     : wflow-plugin-base - PluginManagerCache, ProfilePluginCache - Replaced non-thread-safe collections with concurrent utilities to improve concurrency and thread safety. 
[ FIXED ]      CORE     : wflow-core - FormDataDaoImpl - fail to retrieve column when field name in the form is labelled as single digit 
[ FIXED ]      CORE     : wflow-consoleweb - Builder - Fixed an issue where the Permission tab table row color had too high opacity, preventing the hover color from displaying correctly. 
[ FIXED ]      CORE     : wflow-consoleweb - Builder - Resolved the design icon visibility issue in the Tree/X-ray viewer under dark CORE . 
[ FIXED ]      CORE     : wflow-consoleweb - Builder - Resolved the export column background issue in the List Builder Permission tab when using the dark CORE . 
[ FIXED ]      CORE     : wflow-consoleweb - Usage - Fixed the arrow button color is applied on DX9. 
[ FIXED ]      CORE     : wflow-consoleweb - Tree Viewer - Change arrow direction for consistency when expanding and collapsing. 
[ FIXED ]      CORE     : wflow-consoleweb - Permission Table - Add background color for the Authorized and Unauthorized section in the dark CORE . 
[ FIXED ]      CORE     : wflow-consoleweb - Usage - Seperate the styling for the arrow and the text & change the arrow direction for consistency. 
[ FIXED ]      CORE     : wflow-consoleweb - Usages Tab - Added dark CORE  to Usages Tab item content. 
[ FIXED ]      CORE     : wflow-consoleweb - Tree Viewer and X-ray Tab - Fixed Icon and arrow not visible while in Dark mode issue. 
[ FIXED ]      CORE     : wflow-consoleweb - Permissions Tab - Fixed background of empty export is showing up as white color issue while in dark CORE . 
[ FIXED ]      CORE     : wflow-consoleweb - Permission Tab - Fixed Square Icon not visible when section is collaps iss ue. 
[ FIXED ]      CORE     : wflow-consoleweb - Permission Tab - Added missing Dark CORE  CSS to Pemission Tab Elements. 
[ MODIFIED ]   CORE     : wflow-commons - SetupManagerCache - Added defensive copy and null value handling to improve cache consistency. 
[ FIXED ]      CORE     : wflow-consoleweb - Fixed unable to create a new process with "Add New" button 
[ FIXED ]      CORE     : wflow-consoleweb - Custom CSS - Fixed custom css in system settings is HTML-escaped, breaking selectors with special characters. 
[ FIXED ]      CORE     : wflow-core - App Service - Fixed common table prefix only check for the same prefix table name. 
[ FIXED ]      CORE     : wflow-core - Color Admin CORE  - Fixed Sidebar Menu Background (Active) color is not correctly apply. 
[ FIXED ]      CORE     : wflow-core - FileUpload - Added handling for missing files and error message display.  
[ FIXED ]      CORE     : wflow-core - UserReplacementDaoImpl - Handle null processIds value in getUserTodayReplacedBy query for Oracle databases.  
[ FIXED ]      CORE     : wflow-core, wflow-consoleweb, wflow-wfengine - Audit Trail - Fixed inconsistent appId Population in wf_audit_trail for Authentication and System Activities  
[ MODIFIED ]   CORE     : wflow-commons - pom.xml - Upgraded Log4j dependencies to 2.25.4. 
[ MODIFIED ]   CORE     : wflow-consoleweb - canvg.js - Updated to v3.0.11.  
[ FIXED ]      CORE     : wflow-core - GridInnerDataStoreBinderWrapper - fixed deletion in nested grid  
[ FIXED ]      CORE     : wflow-commons - StringUtil - fixUnclosedTags method to retain only body content and disabling pretty print.  
[ FIXED ]      CORE     : wflow-consoleweb - Property Assistant - Fixed property assistant icon not visible . 
[ ADDED ]      CORE     : wflow-core - CustomBuilderCloneCallback - Allow CustomBuilders to process BuilderDefinitions during app cloning.  

Enterprise & Cloud Editions

[ FIXED ]      CORE     : jw-enterprise - Security - Prevent host spoofing on multi tenant environment. 
[ FIXED ]     PLUGIN    : wflow-enterprise-plugins - Spreadsheet - Fixed for Spreadsheet File Upload 404 Error and JavaScript Console Errors  
[ FIXED ]      CORE     : jw-enterprise - Security - Upgraded Apache Tomcat to 9.0.117 to address CVE-2026-34486. 
[ FIXED ]      CORE     : cloud-wfengine - MultiTenantPluginManager - Resolved potential deadlock by replacing refresh() with installBundles(). 
[ MODIFIED ]   CORE     : cloud-install, wflow-enterprise-install - NOTICE.txt - Upgraded Log4j dependencies to 2.25.4. 
[ FIXED ]     PLUGIN    : wflow-enterprise-plugins - Ajax Subform - Ajax Subform does not load when Parent field to keep subform ID is empty 
[ FIXED ]      CORE     : wflow-enterpriseweb - Generator - Fixed broken link 
[ FIXED ]      CORE     : wflow-enterprise-plugins - DX8 Angle CORE  - Fixed sidebar menu active background color is not behave consistently. 
[ MODIFIED ]  PLUGIN    : wflow-enterprise-plugins - spreadSheet.js - Updated Handsontable license key for 2026-2027. 
[ FIXED ]     PLUGIN    : wflow-enterprise-plugins - ImageUpload - Added handling for missing files and error message display.