Features:

• Improve VEX import performance - apiserver/#6141
• Include groupBy parameter in DefectDojo finding upload - apiserver/#6130
• Include analysis detail in DefectDojo finding payload - apiserver/#6181
• Improve performance of OSV mirroring - apiserver/#6345
• Show exploit predictions from all sources - frontend/#1523

Fixes:

• Reject parent objects with null UUID when creating, updating or patching projects - apiserver/#6355
• Fix NPE and redundant queries in VEX / VDR export - apiserver/#6614
• Prevent duplicate downloads when using export and download buttons - frontend/#1659

For a complete list of changes, refer to the respective GitHub milestones:

• API server milestone 4.14.3
• Frontend milestone 4.14.3

We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.

Special thanks to everyone who contributed code to implement enhancements and fix defects:

@ElenaStroebele, @heyiamwahab236, @webdevred, @yuwwx

dependency-track-apiserver.jar

Algorithm	Checksum
SHA-1	40db3eb67df441382971c8fb6566b86bc65976f4
SHA-256	11a5c85616b745803b5653016d9da2195f2e23ac66fe6a85d2ae2b4661d393a9

dependency-track-bundled.jar

Algorithm	Checksum
SHA-1	71a8e224166a55efb163922bb9874c151b3d95eb
SHA-256	4cbedd435f0f07b520216e4c30b9c81ca9a43044c569285ed1aa2e4f1533f5be

frontend-dist.zip

Algorithm	Checksum
SHA-1	be91ca477d92f492cdd4e5d215e3154f97c50be5
SHA-256	de3d76d978689d0fe571683cfeedf7fea095a1fd03f86cf622a099b5b72f4477

Software Bill of Materials (SBOM)

• API Server: bom.json
• Frontend: bom.json