> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/itential-gateway/5/release-notes/changelog/2026/3/6/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# Gateway Manager 1.0.7

Gateway Manager 1.0.7 is a maintenance release that includes security hardening and access control improvements for Gateway Manager. Key updates include resolution of multiple security vulnerabilities including ReDoS, prototype pollution, XSS, and algorithmic complexity issues. This release also enhances user access filtering for groups and tags, and fixes certificate management functionality in the UI.

#### Enhancements (2)

| Feature                                  | Description                                                                                    |
| ---------------------------------------- | ---------------------------------------------------------------------------------------------- |
| **Access control filtering** (ENG-18514) | Enhanced filtering to ensure viewable groups and tags are filtered by user access permissions. |
| **Inventory table layout** (ENG-19144)   | Fixed extra width issue on the Inventories table during layout updates.                        |

#### Bug fixes (4)

| Feature                                                                                                                  | Description                                                                                  |
| ------------------------------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------- |
| **Cross-site scripting (XSS) vulnerabilities** (ENG-18232, ENG-18235)                                                    | Resolved cross-site scripting (XSS) vulnerabilities.                                         |
| **Prototype pollution vulnerabilities** (ENG-19178, ENG-19181, ENG-19182)                                                | Addressed prototype pollution vulnerabilities in dependencies.                               |
| **Regular expression denial of service (ReDoS) vulnerabilities** (ENG-19396, ENG-19401, ENG-19550, ENG-19551, ENG-19628) | Fixed regular expression denial of service (ReDoS) vulnerabilities in multiple dependencies. |
| **Inefficient algorithmic complexity** (ENG-20186, ENG-20189, ENG-20190)                                                 | Resolved inefficient algorithmic complexity issues in dependencies.                          |

#### Security fixes (1)

| Feature                                        | Description                                                                             |
| ---------------------------------------------- | --------------------------------------------------------------------------------------- |
| **Certificate management buttons** (ENG-14972) | Fixed Certificate View/Delete buttons on the Gateway details view to function properly. |