Hotfix 2
Aug 24, 2026
Web App SDK Version: 9.5.0.125
Bouncy Castle updated
The bouncycastle Java cryptographic library was updated to the latest version.
Hotfix 1
July 31, 2026
Web App SDK Version: 9.5.0.122
Issues fixed in this version
Updates were made to the Sign-in page form elements and stylesheet to improve support for autocomplete.
The
log4jlibrary has been updated to address potential vulnerabilities.Quick Authentication is now supported in all modes.
Previously, Quick Authentication was only supported in AutoStart.SIGN_IN mode.
Main release
April 30, 2026
Web App SDK: 9.5.0.46
New in this version
Customers can download a checksum with their product package to independently verify the integrity and authenticity of the software.
Two endpoints formerly used to configure nnlfedapp are no longer supported: nnlfedapp/fidoreg and nnlfedapp/resp. If you are still using these, please update them to use nnlfedapp/req.jsp and nnlfedapp/resp.jsp respectively, instead.
Issues fixed in this version
A bug in iOS 26.2 prohibits the registration of a passkey on a non-Safari browser.
Previous Behavior: The App SDK is not able to register a passkey on iOS and a Chrome browser.
New Behavior: The App SDK is able to register a passkey on iOS and a Chrome browser.
The App SDK displays a non-gray background below the QR code when the user scrolls a website window that contains a QR code whose height is larger than the height of the website window.
Previous Behavior: The App SDK displays a non-gray background below the QR code when the user scrolls a website window that contains a QR code whose height is larger than the height of the website window.
New Behavior: The App SDK displays a totally gray background behind a QR code, even when the user scrolls because the website window height is smaller than the QR code dialog.
Prerequisites
Apache Tomcat 10.1 or later
Eclipse latest version
No changes are required to upgrade your app from the Web App SDK 9.4 to the Web App SDK 9.5.