In this release, the usability of selection fields in the capture form and in dialog boxes has been improved.
In addition, we have fixed several errors and security-related bugs in various components.
New functions and enhancements
ID 20560: Improve usability when searching for entries in a selection list in the capture form
The usability of input fields in the capture form (header fields) and in dialog boxes has been improved. Searching for entries in long drop-down lists is now faster and can be performed using the keyboard or a screen reader.
Optional column headers in the selection lists improve the display of list entries.
Bug fixes and improvements
High ID 20639: The "None" encryption method still forces an encrypted connection
If you have selected the None encryption method, a connection will now be established to SMTP servers that only accept connections without encryption.
High ID 20632: Inconsistent gross rounding blocks workflow completion
The gross per-capita variance is calculated consistently in the capture form and during the final audit. The workflow task for invoices with an actual variance of 0.00 EUR can now be completed despite differences in rounding.
High ID 20585: Document recognition doubles net amounts or sets them to "0"
Net amounts and tax amounts from automatically recognized invoices are consistently applied when the amount data can be unambiguously mapped. Duplicate total tax details and conflicting zero values are automatically corrected without altering valid zero amounts or actual partial amounts.
High ID 20790: Login issue with REST connection to the "Microsoft" provider: The value for "client_secret" is lost when saved, and "login.windows.net" is rejected
If you use a REST connection in the connection details with the Bearer Token authentication method and the Microsoft provider, the original value for client_secret is retained when you save the settings. In addition, the value for tenant_id is once again accepted by all official Microsoft login addresses (e.g., login.windows.net).
If the value for client_secret has already been overwritten with asterisks, you must re-enter the value.
Normal ID 20807: Security vulnerabilities in Node.js (invoice-session-service)
The Node.js runtime component has been updated to version 24.22.1. This update incorporates the security fixes included in this version.
Normal ID 20781: Security vulnerability in Brotli (CVE-2026-111497) in the "workflow-session-socket" service
A critical security vulnerability (CVE-2026-111497) in Brotli decompression was fixed by an update to Node.js and the system packages in the edoc workflow session socket service.
Normal ID 20594: The value date is moved to the following day during import
During import, the value date retains the corresponding calendar day regardless of the time. Payment terms and cash discount dates based on the date and time are no longer shifted by one day.
Normal ID 20592: The financial monitor in edoc invoice does not display line items with negative amounts
The financial monitor also displays items with a negative net amount, allowing documents with mixed signs to be reviewed in full. Line items with a net amount of 0 remain hidden.
Normal ID 20583: Joint grouping of company-specific header fields is missing
You can now group individual header fields in the task overview in a combined manner, for example, first by company and then by location.
Normal ID 20578: Provide the unit of measure "unit" for transactional data export in the new schema version 7
The transactional data export supports a new schema version 7, which provides the unit of measures unit per line item, so you can now export units of measure as well.
Normal ID 20764: Security vulnerabilities in Node.js (core UI component)
The Node.js runtime component of the central UI suite has been updated to version 24.22.1. This update incorporates the security fixes included in this version into the development and E2E testing environments.