---
title: v4.11.6
type: patch
---

**Enhancements:**

* Improve French translation - [frontend/#964]

**Fixes:**

* Handle breaking change in Trivy v0.54.0 server API - [apiserver/#4040]
* Fix validation error when XML BOM declares multiple namespaces - [apiserver/#4041]
* Fix `JDOUserException` when multiple licenses match a component's license name - [apiserver/#4042]
* Fix anchors in changelog documentation - [apiserver/#4043]
* Fix project link for new vulnerable dependency in email notifications - [apiserver/#4044]
* Fix `parent` field occasionally missing in `/api/v1/project/{uuid}` responses - [apiserver/#4049]
* Fix VEX export returning invalid CycloneDX - [apiserver/#4054]

For a complete list of changes, refer to the respective GitHub milestones:

* [API server milestone 4.11.6](https://github.com/DependencyTrack/dependency-track/milestone/43?closed=1)
* [Frontend milestone 4.11.6](https://github.com/DependencyTrack/frontend/milestone/28?closed=1)

We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.

Special thanks to everyone who contributed code to implement enhancements and fix defects:  
[@2000rosser], [@JCHacking], [@SaberStrat], [@molusk], [@philippn]

###### [dependency-track-apiserver.jar](https://github.com/DependencyTrack/dependency-track/releases/download/4.11.6/dependency-track-apiserver.jar)

| Algorithm | Checksum                                                         |
|:----------|:-----------------------------------------------------------------|
| SHA-1     | daab7ed5b760ff909e4b9cc041b89c3374c1d955                         |
| SHA-256   | a76cc3417728bdc880f41af613e543d3e5f033d7b0b1db84ffb397bcbcb3936b |

###### [dependency-track-bundled.jar](https://github.com/DependencyTrack/dependency-track/releases/download/4.11.6/dependency-track-bundled.jar)

| Algorithm | Checksum                                                         |
|:----------|:-----------------------------------------------------------------|
| SHA-1     | 8ff2bd4db69e7083d501a4c489f703677044a5f0                         |
| SHA-256   | fd1c25e2b2d727f377eeec8240370558a9796225fe4dc0f258021b1061fbc36f |

###### [frontend-dist.zip](https://github.com/DependencyTrack/frontend/releases/download/4.11.6/frontend-dist.zip)

| Algorithm | Checksum                                                         |
|:----------|:-----------------------------------------------------------------|
| SHA-1     | c91bede201957c994f338a043a44ebd32824319e                         |
| SHA-256   | 55ea0735b80c8cc17d31590ba16c3650943a3cdb595accf3540fefd1670ee1b9 |

###### Software Bill of Materials (SBOM)

* API Server: [bom.json](https://github.com/DependencyTrack/dependency-track/releases/download/4.11.6/bom.json)
* Frontend: [bom.json](https://github.com/DependencyTrack/frontend/releases/download/4.11.6/bom.json)

[apiserver/#4040]: https://github.com/DependencyTrack/dependency-track/pull/4040
[apiserver/#4041]: https://github.com/DependencyTrack/dependency-track/pull/4041
[apiserver/#4042]: https://github.com/DependencyTrack/dependency-track/pull/4042
[apiserver/#4043]: https://github.com/DependencyTrack/dependency-track/pull/4043
[apiserver/#4044]: https://github.com/DependencyTrack/dependency-track/pull/4044
[apiserver/#4049]: https://github.com/DependencyTrack/dependency-track/pull/4049
[apiserver/#4054]: https://github.com/DependencyTrack/dependency-track/pull/4054

[frontend/#964]: https://github.com/DependencyTrack/frontend/pull/964

[@2000rosser]: https://github.com/2000rosser
[@JCHacking]: https://github.com/JCHacking
[@SaberStrat]: https://github.com/SaberStrat
[@molusk]: https://github.com/molusk
[@philippn]: https://github.com/philippn
