---
title: PingFederate 11.3.13 (September 2025)
description: Fixed PF-35868
component: pingfederate
version: 13.1
page_id: pingfederate:release_notes:pf_release_notes_11313
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/release_notes/pf_release_notes_11313.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
section_ids:
  resolved-issues: Resolved issues
  refresh-token-mysql-deadlocks: Refresh token MySQL deadlocks
  virtual-hostname-accuracy-in-email-notifications: Virtual hostname accuracy in email notifications
  apache-commons-beanutils-and-compress: Apache Commons BeanUtils and Compress
---

# PingFederate 11.3.13 (September 2025)

## Resolved issues

### Refresh token MySQL deadlocks

Fixed PF-35868

We've fixed a defect that caused multiple refresh token requests in short succession to result in Java database connectivity (JDBC) *(tooltip: \<div class="paragraph">
\<p>A Java API that allows Java programs to interact with databases.\</p>
\</div>)* data source deadlocks and duplicated data entry into the database.

This feature can cause significant performance issues if PingFederate or the JDBC data source has insufficient resources.

### Virtual hostname accuracy in email notifications

Fixed PF-37964

We've fixed a defect where a template variable incorrectly used the primary PingFederate base URL instead of the virtual hostname in some email notifications.

### Apache Commons BeanUtils and Compress

Fixed PF-38029

PingFederate now uses the Apache Commons BeanUtils library version 1.11.0 and Apache Commons Compress library version 1.26.