In this release, we have fixed various errors and security-related bugs.
New functions and enhancements
Unfortunately, no new features are delivered in this release.
Bug fixes and improvements
High ID 20639: The "None" encryption method still forces an encrypted connection
If you have selected the None encryption method, a connection will now be established to SMTP servers that only accept connections without encryption.
High ID 20765: Security vulnerabilities in Node.js (front-end component)
The Node.js runtime component has been updated to version 24.22.1. With this update, the security fixes included in this version are applied to the application containers and to the development and E2E testing environments.
High ID 20764: Security vulnerabilities in Node.js (core UI component)
The Node.js runtime component of the central UI suite has been updated to version 24.22.1. This update incorporates the security fixes included in this version into the development and E2E testing environments.
Normal ID 20781: Security vulnerability in Brotli (CVE-2026-111497) in the "workflow-session-socket" service
A critical security vulnerability (CVE-2026-111497) in Brotli decompression was fixed by an update to Node.js and the system packages in the edoc workflow session socket service.
Normal ID 20523: Purchase order numbers and individual header fields are not reliably updated in the workflow
Processed purchase order numbers are now once again transferred to the workflow in edoc order confirmation. Newly created individual header fields and modified field labels are also taken into account in processes that have already been started during the next synchronization.