2021.10.12

Release date: 13 June 2023

Bug fixes

Security vulnerability fixes

We have fixed an issue that affected Swagger UI versions 3.14.1 to 3.37.2, allowing their libraries to fetch potentially malicious specification files linked through Swagger UI. Note that the issue is not directly exploitable, and it requires an authenticated user to actually open the malicious link.

To overcome this, we strongly advise you to update to the latest possible version (major or cumulative update).

Please see the security advisory for details.

Miscellaneous fixes

The runtime used by a robot to run an automation was not released once the robot service stopped. This was caused by an inaccuracy in the succession of activities, which has been fixed. Now, when the robot is disconnected, its runtime is released into the tenant pool.
Retrieving queue item events and comments returned a list from all the folders in the tenant. Now, you get the list of queue item events and comments only for the folders that you have access to.