--- title: Previous Releases description: PingCentral release notes for 2022 and earlier component: pingcentral version: 3.2 page_id: pingcentral:release_notes:pingcentral_prev_relnotes canonical_url: https://docs.pingidentity.com/pingcentral/3.2/release_notes/pingcentral_prev_relnotes.html llms_txt: https://docs.pingidentity.com/pingcentral/llms.txt docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md revdate: August 3, 2023 section_ids: pingcentral-3-1-march-2026: PingCentral 3.1 (March 2026) administrators-can-now-configure-signature-policies-for-saml-sp-connections: Administrators can now configure signature policies for SAML SP connections security-vulnerability-fixed: Security vulnerability fixed apache-commons-compress-updated: Apache Commons Compress updated moment-js-updated: Moment.js updated option-to-download-saml-idp-metadata-issue-fixed: Option to download SAML IdP metadata issue fixed swagger-ui-library-updated: Swagger UI library updated swagger-json-fixed: Swagger.json fixed api-loading-issues-resolved: API loading issues resolved h2-database-updated: H2 database updated hibernate-library-updated: Hibernate library updated socket-appender-in-apache-log4j-updated: Socket Appender in Apache Log4j updated sso-issue-resolved: SSO issue resolved outdated-uri-issue-resolved: Outdated URI issue resolved --- # Previous Releases ## PingCentral 3.1 (March 2026) ### Administrators can now configure signature policies for SAML SP connections New PASS-7155 Administrators can now configure signature policies for SP connections when they create templates and applications, and promote applications to PingCentral environments. Previously, PingFederate administrators had to configure the signature policies after the applications were promoted to PingFederate, which interrupted their workflow and caused unnecessary delays in the process. Note that signature policy configurations are only visible if the corresponding profiles and artifact binding are enabled in the underlying PingFederate SP connection. To learn more, refer to step 8 in [Adding SAML application templates](../pingcentral_for_iam_administrators/pingcentral_mng_templates/pingcentral_mng_templates.html#_adding_saml_application_templates). ### Security vulnerability fixed Fixed PASS-1323 We've fixed the client-side security vulnerability in DOM-based XSS in redirect URI definitions. ### Apache Commons Compress updated Fixed PASS-5852 The Apache Commons Compress has been updated to version 1.26, which resolved the security vulnerability that affected versions 1.0 to 1.21. You can find more information about the [CVE-2021-36090 vulnerability](https://nvd.nist.gov/vuln/detail/cve-2021-36090) on the National Vulnerability Database site. ### Moment.js updated Fixed PASS-6410 Moment.js has been updated to version 2.29.4, which resolved the path traversal vulnerability that affected versions 1.0.1 to 2.29.1. You can find more information about the [CVE-2022-24785 vulnerability](https://nvd.nist.gov/vuln/detail/cve-2022-24785) on the National Vulnerability Database site. ### Option to download SAML IdP metadata issue fixed Fixed PASS-7017 We've fixed the **Promotion Details** page so that it now displays the option to download the SAML IdP metadata if the application was promoted directly from the JSON file. ### Swagger UI library updated Fixed PASS-7021 The Swagger UI library has been updated from version 2.9.2 to 3.23.11 to prevent future false-positive scan alerts. You can find more information about the [CVE-2019-17495 vulnerability](https://nvd.nist.gov/vuln/detail/cve-2019-17495) on the National Vulnerability Database site. ### Swagger.json fixed Fixed PASS-7132 We've fixed the swagger.json endpoint, and it now returns information about the Admin API as expected. ### API loading issues resolved Fixed PASS-7163 We've fixed the issue where users encountered a continuous loading screen when they tried to access the API. The API now works as expected and returns a response. ### H2 database updated Fixed PASS-7070 The H2 database has been updated to version 2.2.220, which resolved the security vulnerability that affected version 2.1.210. You can find more information about the [CVE-2022-45868 vulnerability](https://nvd.nist.gov/vuln/detail/cve-2022-45868) on the National Vulnerability Database site. ### Hibernate library updated Fixed PASS-7172 The `hibernate-ehcache` library is no longer used, which resolved the security vulnerability. You can find more information about the [CVE-2026-0603 vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2026-0603) on the National Vulnerability Database site. ### Socket Appender in Apache Log4j updated Fixed PASS-7174 The Socket Appender in Apache Log4j has been updated to version 2.25.3, which resolved the security vulnerability that affected versions 2.0-beta9 through 2.25.2. You can find more information about the [CVE-2025-68161 vulnerability](https://nvd.nist.gov/vuln/detail/CVE-2025-68161) on the National Vulnerability Database site. ### SSO issue resolved Fixed PASS-7176 We've fixed an issue with SSO, and users are now redirected to the PingFederate sign-on page instead of the PingCentral home page when they sign on. ### Outdated URI issue resolved Fixed PASS-7187 We've fixed an issue where redirect URIs were still displayed in OAuth or OIDC applications after the environment referenced in the URI was deleted.