Knowledge Base
Knowledge Base
  • Login
Font Size:
Ask Joget AI

Version 9.0.7

Version Highlights

Release Date: 18 May 2026
Editions: All Editions, Enterprise & Cloud Editions
Focus Areas: Bug fixes, security upgrades, dependency updates, and UI/theme consistency

Core Enhancements

Improvements to Joget's core features, including Builders, APIs, and overall platform performance.

  • Added the capability to allow CustomBuilders to process BuilderDefinitions during app cloning.

Theme-Specific Fixes

Updates and fixes related to themes, ensuring better UI consistency and user experience.

  • Resolved visibility issues for design icons, square icons, and arrows in the Tree Viewer and X-ray tabs under the dark theme.
  • Added missing dark theme CSS for Permissions Tab elements, Usages Tab item content, and export column backgrounds.
  • Fixed an issue where the Permission tab table row color had too high opacity, preventing the hover color from displaying correctly.
  • Added background colors for the Authorized and Unauthorized sections in the Permission Table for the dark theme.
  • Fixed the arrow button color and standardized arrow directions when expanding and collapsing in the Tree Viewer and Usage tabs.
  • Fixed the sidebar menu background active color from failing to apply correctly in the Color Admin Theme and DX 8 Angle Theme.
  • Fixed an issue where custom CSS and JS were not triggered when changing themes or opening/closing the Settings tab in the UI Builder.

Bug Fixes and Improvements

List of bugs resolved in this release, along with general performance and stability improvements.

  • Cleared the hash variable plugin cache after form submission to prevent stale data issues.
  • Prevented stale data from being served to subsequent plugins due to request-level caching.
  • Resolved a component key mismatch during user ID retrieval from the migrationAssignmentUserList ThreadLocal.
  • Added a missing bottom red border when a mandatory value is missing in the Update Form Data tool.
  • Fixed Process Builder transitions and an issue preventing users from creating a new process with the Add New button.
  • Fixed a failure to retrieve columns when a field name in the form is labeled as a single digit.
  • Added defensive copy and null value handling to SetupManagerCache to improve cache consistency.
  • Adjusted timezone fallback logic to use JVM timezone for improved profile isolation, and updated default locale/timezone resolution to align with Spring 6.0 API changes.
  • Fixed an issue where custom CSS in system settings was HTML-escaped, breaking selectors with special characters.
  • Corrected the common table prefix logic to only check for the exact prefix table name.
  • Resolved an issue where parent form data could not be saved with a store binder configured.
  • Added handling for missing files and proper error message displays in FileUpload and ImageUpload.
  • Added handling for null processIds values in the getUserTodayReplacedBy query for Oracle databases.
  • Fixed the wrong cursor location after resizing the code editor.
  • Fixed the inconsistent appId population in wf_audit_trail for Authentication and System Activities.
  • Fixed a deletion error in nested grids within the GridInnerDataStoreBinderWrapper.
  • Updated the fixUnclosedTags method to retain only body content and disable pretty print.
  • Fixed the Property Assistant icon visibility and an issue preventing it from inserting hash variables using shortcut keys.

Plugin Improvements

Enhancements to plugins, plugin management, and plugin development for greater flexibility and stability.

  • Replaced ReentrantReadWriteLock with ReentrantLock in the PluginManager to resolve deadlock issues during plugin caching.
  • Replaced non-thread-safe collections with concurrent utilities to improve concurrency and thread safety in PluginManagerCache and ProfilePluginCache.

Build & Dependencies

Updated components and dependencies within Joget, including third-party libraries and internal modules.

  • Upgraded Spring frameworks dependencies to version 6.2.17.
  • Upgraded Log4j dependencies to version 2.25.4.
  • Updated canvg.js to version 3.0.11.

Security Updates

Critical patches and security-related improvements.

  • Upgraded Apache Tomcat to version 11.0.21 to address CVE-2026-34486.
  • Prevented host spoofing in multi-tenant environments.

Enterprise & Cloud Specific

Fixes and improvements specific to Enterprise and Cloud editions.
Note: All Community edition updates are automatically included in Enterprise and Cloud.

  • Prevented host spoofing on multi-tenant environments and upgraded Apache Tomcat to 11.0.21 to address CVE-2026-34486 in the Enterprise edition.
  • Upgraded kafka-clients to 3.9.2 to address CVE-2026-35554 and upgraded Spring frameworks to 6.2.17 in the Event Stream Kafka plugin.
  • Resolved a potential deadlock in Cloud workflows by replacing refresh() with installBundles() in the MultiTenantPluginManager.
  • Upgraded Log4j dependencies to 2.25.4 in cloud-install and wflow-enterprise-install.
  • Fixed file upload 404 errors and JavaScript console errors in the Spreadsheet plugin, and updated the Handsontable license key for 2026-2027.
  • Fixed an issue where the Ajax Subform plugin would not load when the Parent field used to keep the subform ID was empty.
  • Added handling for missing files and proper error messages in the Enterprise ImageUpload plugin.
  • Fixed the DX 8 Angle Theme sidebar menu active background color issue.
  • Fixed broken links in the Enterprise Generator.
  • Fixed a regex failure in LDAP Util, causing user listing and login failures.

Known Issue

In Process Builder, renaming an activity ID and saving the process may trigger "Missing transition or start/end" and "Design is invalid" errors. To work around this, rename nodes before completing wiring or transitions. A fix is currently in development and will be included in the upcoming release.

Full Changelogs

Bug Fixes and Improvements

All Editions

[ FIXED ]      CORE     : jw-community - Security - Prevent host spoofing on multi tenant environment.
[ FIXED ]      CORE     : wflow-core - AppServiceImpl - Clear hash variable plugin cache after form submission to prevent stale data issues.
[ FIXED ]      CORE     : wflow-core - Multi Tools - Prevent stale data from being served to subsequent plugins due to request-level caching.
[ FIXED ]      CORE     : wflow-wfengine - WorkflowManagerImpl - Component key mismatch during user ID retrieval from migrationAssignmentUserList ThreadLocal.
[ FIXED ]      CORE     : wflow-commons - pom.xml - Upgrade Spring frameworks to 6.2.17
[ FIXED ]      CORE     : jw-community - Security - Upgraded Apache Tomcat to 11.0.21 to address CVE-2026-34486.
[ FIXED ]      CORE     : wflow-plugin-base - PluginManager - Replaced ReentrantReadWriteLock with ReentrantLock to resolve deadlock issues during plugin caching.
[ FIXED ]      CORE     : wflow-plugin-base - PluginManagerCache, ProfilePluginCache - Replaced non-thread-safe collections with concurrent utilities to improve concurrency and thread safety.
[ FIXED ]      CORE     : wflow-consoleweb - Update Form Data tool - Added missing bottom red border when mandatory value is missing.
[ FIXED ]      CORE     : wflow-consoleweb - Process Builder - Fixed Process Builder Transitions
[ FIXED ]      CORE     : wflow-core - FormDataDaoImpl - fail to retrieve column when field name in the form is labelled as single digit
[ FIXED ]      CORE     : wflow-consoleweb - Usages Tab - Fixed Arrow Icon not matching the color of Item under Usage Tab.
[ FIXED ]      CORE     : wflow-consoleweb - Permissions Tab - Added additional Dark mode CSS for Permissions Tab Elements in DX 9.
[ FIXED ]      CORE     : wflow-consoleweb - Builder - Fixed an issue where the Permission tab table row color had too high opacity, preventing the hover color from displaying correctly.
[ FIXED ]      CORE     : wflow-consoleweb - Builder - Resolved the design icon visibility issue in the Tree/X-ray viewer under dark theme.
[ FIXED ]      CORE     : wflow-consoleweb - Builder - Resolved the export column background issue in the List Builder Permission tab when using the dark CORE .
[ FIXED ]      CORE     : wflow-consoleweb - Usage - Fixed the arrow button color is applied on DX 9.
[ FIXED ]      CORE     : wflow-consoleweb - Tree Viewer - Change arrow direction for consistency when expanding and collapsing.
[ FIXED ]      CORE     : wflow-consoleweb - Permission Table - Add background color for the Authorized and Unauthorized section in the dark theme.
[ FIXED ]      CORE     : wflow-consoleweb - Usage - Seperate the styling for the arrow and the text & change the arrow direction for consistency.
[ FIXED ]      CORE     : wflow-consoleweb - Usages Tab - Added dark theme to Usages Tab item content.
[ FIXED ]      CORE     : wflow-consoleweb - Tree Viewer and X-ray Tab - Fixed Icon and arrow not visible while in Dark mode issue.
[ FIXED ]      CORE     : wflow-consoleweb - Permissions Tab - Fixed background of empty export is showing up as white color issue while in dark theme.
[ FIXED ]      CORE     : wflow-consoleweb - Permission Tab - Fixed Square Icon not visible when section is collaps issue.
[ FIXED ]      CORE     : wflow-consoleweb - Permission Tab - Added missing Dark theme  CSS to Pemission Tab Elements.
[ MODIFIED ]   CORE     : wflow-commons - SetupManagerCache - Added defensive copy and null value handling to improve cache consistency.
[ FIXED ]      CORE     : wflow-consoleweb - Fixed unable to create a new process with "Add New" button
[ MODIFIED ]   CORE     : wflow-consoleweb - UI Builder - Fixed the existing custom CSS/JS not trigger when changing theme and trigger when open and closes "Settings" tab
[ FIXED ]      CORE     : wflow-core - LocalLocaleResolver - Adjusted timezone fallback logic to use JVM timezone for improved profile isolation.
[ FIXED ]      CORE     : wflow-core - LocalLocaleResolver - Updated default locale and timezone resolution to align with Spring 6.0 API changes.
[ FIXED ]      CORE     : wflow-consoleweb - Custom CSS - Fixed custom css in system settings is HTML-escaped, breaking selectors with special characters.
[ FIXED ]      CORE     : wflow-core - App Service - Fixed common table prefix only check for the same prefix table name.
[ FIXED ]      CORE     : wflow-core - AppServiceImpl - Unable to save parent form data with a store binder configured.
[ FIXED ]      CORE     : wflow-core - Color Admin theme  - Fixed Sidebar Menu Background (Active) color is not correctly apply.
[ FIXED ]      CORE     : wflow-core - FileUpload - Added handling for missing files and error message display.
[ FIXED ]      CORE     : wflow-core - UserReplacementDaoImpl - Handle null processIds value in getUserTodayReplacedBy query for Oracle databases.
[ FIXED ]      CORE     : wflow-consoleweb - Code Editor - Fixed wrong cursor location after resizing the property editor.
[ FIXED ]      CORE     : wflow-core, wflow-consoleweb, wflow-wfengine - Audit Trail - Fixed inconsistent appId Population in wf_audit_trail for Authentication and System Activities.
[ MODIFIED ]   CORE     : wflow-commons - pom.xml - Upgraded Log4j dependencies to 2.25.4.
[ MODIFIED ]   CORE     : wflow-consoleweb - canvg.js - Updated to v3.0.11.
[ FIXED ]      CORE     : wflow-core - GridInnerDataStoreBinderWrapper - fixed deletion in nested grid
[ FIXED ]      CORE     : wflow-commons - StringUtil - fixUnclosedTags method to retain only body content and disabling pretty print.
[ FIXED ]      CORE     : wflow-consoleweb - Property Assistant - Fixed property assistant unable to insert hash variable using shortcut key.
[ FIXED ]      CORE     : wflow-consoleweb - Property Assistant - Fixed property assistant icon not visible.
[ ADDED ]      CORE     : wflow-core - CustomBuilderCloneCallback - Allow CustomBuilders to process BuilderDefinitions during app cloning.
 

Enterprise & Cloud Editions

[ MODIFIED ]   CORE     : jw-enterprise - Updated CHANGES.txt.
[ FIXED ]      CORE     : jw-enterprise - Security - Prevent host spoofing on multi tenant environment.
[ FIXED ]     PLUGIN    : wflow-enterprise-plugins - Spreadsheet - Fixed for Spreadsheet File Upload 404 Error and JavaScript Console Errors.
[ FIXED ]      CORE     : wflow-eventstream-kafka - pom.xml - Upgrade Spring frameworks to 6.2.17
[ FIXED ]      CORE     : jw-enterprise - Security - Upgraded Apache Tomcat to 11.0.21 to address CVE-2026-34486.
[ MODIFIED ]  PLUGIN    : wflow-eventstream-kafka - Upgraded kafka-clients to 3.9.2 to address CVE-2026-35554.
[ FIXED ]      CORE     : cloud-wfengine - MultiTenantPluginManager - Resolved potential deadlock by replacing refresh() with installBundles().
[ MODIFIED ]   CORE     : cloud-install, wflow-enterprise-install - NOTICE.txt - Upgraded Log4j dependencies to 2.25.4.
[ FIXED ]     PLUGIN    : wflow-enterprise-plugins - Ajax Subform - Ajax Subform does not load when Parent field to keep subform ID is empty.
[ FIXED ]      CORE     : wflow-enterpriseweb - Generator - Fixed broken link
[ FIXED ]      CORE     : wflow-enterprise-plugins - DX 8 Angle theme  - Fixed sidebar menu active background color is n ot behave consistently.
[ MODIFIED ]  PLUGIN    : wflow-enterprise-plugins - spreadSheet.js - Updated Handsontable license key for 2026-2027.
Created by Debanraj Ravindran Last modified by Debanraj Ravindran on Aug 05, 2026
Tags:
Previous Version 9.1-BETA NextVersion 9.1-PREVIEW2