> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.itential.com/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.itential.com/_mcp/server. # 6.3.3 Platform 6.3.3 is a maintenance release containing enhancements, bug fixes, and security updates. #### Enhancements (3) | Feature | Description | | -------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- | | **Project description field** (ENG-19847) | Added optional description field to project creation flows in Studio, enabling better project documentation and organization. | | **Lifecycle Management action descriptions** (ENG-18926) | Enabled setting the description field for Lifecycle Management Action assets to improve asset documentation and searchability. | | **Golden configuration asset descriptions** (ENG-18925) | Enabled setting the description field for golden configuration assets in Configuration Manager, enhancing configuration documentation capabilities. | #### Bug fixes (22) | Feature | Description | | ------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Asset movement from project to global** (ENG-20126) | Fixed an issue where moving an asset from project to global space did not update the asset correctly. Ensured proper asset metadata and reference updates during migration. | | **Workflow import validation errors** (ENG-19989) | Resolved validation errors occurring when importing workflows in Platform 6.3.2. Improved import validation logic to handle edge cases. | | **Custom application functionality** (ENG-19874) | Fixed custom application not working properly in 6.3 and addressed additional issues that occurred when the application did work. Improved application initialization and runtime stability. | | **Task node deselection** (ENG-19709) | Fixed an issue where the task node was automatically deselected when opening task details. Maintained selection state for improved user experience. | | **Asset duplication in projects** (ENG-19549) | Resolved an issue where assets were being duplicated within projects, causing import errors in Platform 6. Implemented proper asset uniqueness validation. | | **Project performance with external references** (ENG-19433) | Improved project loading and performance when large numbers of external references exist. Optimized reference resolution and caching mechanisms. | | **Project loading COLLSCANS** (ENG-19332) | Fixed an issue where loading projects with many components caused spikes in database COLLSCANS leading to platform slowness. Added proper database indexes and optimized queries. | | **JSON Form data binding schema error** (ENG-18622) | Resolved an issue where data binding in JSON Form gave an incorrect schema error consistently. Corrected schema validation logic. | | **Eval null value handling** (ENG-18487) | Fixed an issue where the eval task incorrectly handled null values. Improved null checking and value coercion logic. | | **Child JST renaming on import** (ENG-18187) | Resolved an issue where a referenced child JST was renamed upon workflow import. Preserved original JST names during import operations. | | **JST Designer user function cleanup** (ENG-17989) | Fixed JST Designer failure to clean up assignments from user functions, which created irrecoverably broken JST documents. Implemented proper cleanup routines. | | **Evaluation task job variable input** (ENG-17802) | Corrected an issue where the evaluation task job variable input was not functioning properly. Restored proper variable binding and evaluation. | | **AGManager adapter discovery** (ENG-17775) | Fixed AGManager error on discoverAll where the automation gateway adapter could not be found. Improved adapter registration and discovery mechanisms. | | **Task summary loading state** (ENG-17550) | Resolved an issue where task summary remained stuck in loading state on running workflows. Improved state management and error handling. | | **LCM special character sanitization** (ENG-17240) | Fixed LCM failure to sanitize special characters when invalid regex exists in action names for workflows. Enhanced input validation and sanitization. | | **Redis TLS configuration** (ENG-16926) | Resolved inability to configure Itential Platform to use TLS with Redis and Redis Sentinel. Implemented proper TLS configuration support. | | **Operations Manager job view crash** (ENG-16816) | Fixed Operations Manager job view crash when viewing child iterations of cancelled jobs or jobs without valid job object values. Added proper null checking and error handling. | | **JST import from project** (ENG-15667) | Resolved an issue where automation and JSON Form could not be imported if using a JST from a project. Fixed cross-scope JST reference resolution. | | **Legacy forms export/import** (ENG-15611) | Fixed an issue in 23.2 UAT where legacy forms failed to export/import. Ensured backward compatibility for form migration. | | **renderJsonSchema binding schema** (ENG-13749) | Fixed the bindingSchema parameter in the renderJsonSchema task that was not working correctly. Restored proper schema binding functionality. | | **JSON Form field dependency update** (ENG-12016) | Resolved an issue where a JSON Form with field dependency did not update the selected field properly. Improved dependency tracking and field updates. | | **JST Designer duplicate schema IDs** (ENG-11207) | Fixed JST Designer not warning users about duplicate schema \$id values, which allowed saves but caused misbehavior. Implemented duplicate ID detection and validation. | #### Security fixes (11) This release includes important security updates that address vulnerabilities in third-party packages and platform components. | Feature | Description | | ------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------- | | **ReDoS in ajv (NSO adapter)** (ENG-19908) | Updated ajv package in NSO adapter to resolve a regular expression denial of service (ReDoS) vulnerability. Enhanced regex validation patterns. | | **ReDoS in minimatch (NSO adapter)** (ENG-19907) | Updated minimatch package in NSO adapter to address a ReDoS vulnerability. Improved pattern matching performance. | | **Prototype pollution in lodash (service management)** (ENG-19905) | Updated lodash package in app-service\_management to resolve prototype pollution vulnerability. Enhanced object property validation. | | **ReDoS in ajv (service management)** (ENG-19903) | Updated ajv package in app-service\_management to address a ReDoS vulnerability. Improved schema validation performance. | | **Prototype pollution in lodash (NSO Manager)** (ENG-19899) | Updated lodash package in app-nso\_manager to resolve prototype pollution vulnerability. Implemented proper input sanitization. | | **ReDoS in ajv (NSO Manager)** (ENG-19898) | Updated ajv package in app-nso\_manager to address a ReDoS vulnerability. Enhanced validation efficiency. | | **ReDoS in minimatch (NSO Manager)** (ENG-19897) | Updated minimatch package in app-nso\_manager to resolve a ReDoS vulnerability. Improved glob pattern handling. | | **Resource allocation in axios (NSO Manager 2023.2)** (ENG-19473) | Updated axios package to address allocation of resources without limits or throttling vulnerability. Implemented proper request throttling. | | **Prototype pollution in axios (NSO Manager)** (ENG-19472) | Updated axios package in app-nso\_manager to resolve prototype pollution vulnerability. Enhanced HTTP request validation. | | **Prototype pollution in csvtojson** (ENG-16644) | Updated csvtojson package to address prototype pollution vulnerability. Improved CSV parsing security. | | **Predictable value range in form-data (NSO Manager)** (ENG-15022) | Updated form-data package to address predictable value range from previous values vulnerability. Enhanced boundary generation randomness. |