> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.itential.com/itential-platform/2023-2/release-notes/changelog/2026/9/2/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server.

# 2023.2.34

Platform 2023.2.34 is a maintenance release that addresses security vulnerabilities in third-party dependencies across Gateway Manager, Core, Product Adapters, Workflow Engine, Admin Essentials, and other Platform components.

#### Security fixes (13)

This release includes security updates that address vulnerabilities in third-party packages and platform components.

| Component          | Feature                                                                                       | Description                                                                                                                                                                                                                                                                                                                 |
| ------------------ | --------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Admin Essentials   | **Applied security patches to Admin Essentials dependencies** (ENG-26821)                     | Applied security patches to third-party dependencies in Admin Essentials, including updates to `dompurify`, `axios`, and `swagger-ui-react`.                                                                                                                                                                                |
| Core               | **Fixed OpenAPI 3.0.4 import failures and updated dependencies** (ENG-26835)                  | Resolved an issue where OpenAPI 3.0.4 integration specs could fail to import. Also updated third-party dependencies in `pronghorn-core` to address security vulnerabilities.                                                                                                                                                |
| Core               | **Updated iap-ui security dependencies** (ENG-26839)                                          | Updated dependencies in `iap-ui` to pull in the latest security fixes, including a DOMPurify sanitization fix.                                                                                                                                                                                                              |
| Core               | **Updated service security dependencies** (ENG-26865)                                         | Updated third-party dependencies in `service`, including `ajv`, `ioredis`, and `semver`, to resolve known security vulnerabilities.                                                                                                                                                                                         |
| Core               | **Updated network security dependencies** (ENG-26866)                                         | Updated the `uuid` dependency and other sub-dependencies in `network` to address known security vulnerabilities.                                                                                                                                                                                                            |
| Core               | **Updated event-system security dependencies** (ENG-26869)                                    | Updated dependencies and sub-dependencies in `event-system` to pull in security fixes.                                                                                                                                                                                                                                      |
| Gateway Manager    | **Implemented Snyk scanning and package upgrades on adapter-automation\_gateway** (ENG-26952) | Upgraded the following packages in `adapter-automation_gateway` to address security vulnerabilities: `minimatch` 5.1.8, `brace-expansion` 2.1.4, `picomatch` 2.3.2, `braces` 3.0.3, `jws` 3.2.3, `serialize-javascript` 7.0.5, `js-yaml` 4.3.1, `form-data` 4.0.6, `diff` 5.2.2, `ip-address` 10.3.1, and `fast-uri` 3.1.5. |
| itential-utils     | **Updated itential-utils security dependencies** (ENG-26867)                                  | Updated dependencies in `itential-utils`, including `axios`, to pull in security fixes.                                                                                                                                                                                                                                     |
| Job Viewer         | **Resolved several security vulnerabilities requiring dependency updates** (ENG-26940)        | Updated dependencies to resolve security vulnerabilities that required minor package changes or an `npm install`.                                                                                                                                                                                                           |
| Operations Manager | **Resolved several security vulnerabilities requiring dependency updates** (ENG-26940)        | Updated dependencies to resolve security vulnerabilities that required minor package changes or an `npm install`.                                                                                                                                                                                                           |
| Product Adapters   | **Updated adapter-azure\_aaa security dependencies** (ENG-26868)                              | Updated `jsonwebtoken` and other dependencies in `adapter-azure_aaa` to pull in security fixes.                                                                                                                                                                                                                             |
| Product Adapters   | **Updated adapter-email security dependencies** (ENG-26864)                                   | Updated `nodemailer` and `mail-listener6` and their sub-dependencies in `adapter-email` to resolve security vulnerabilities.                                                                                                                                                                                                |
| Workflow Engine    | **Updated app-workflow\_engine security dependencies** (ENG-26863)                            | Updated npm dependencies, such as `uuid`, in `app-workflow_engine` to fix known security vulnerabilities.                                                                                                                                                                                                                   |