---
title: v4.12.6
type: patch
---

**Fixes:**

* Fix possible NPEs in `TrivyAnalysisTask` - [apiserver/#4671]
* Analyze all components of a project at once instead of in batches - [apiserver/#4673]
* Fix notification webhook sending blank header - [apiserver/#4680]
* Fix local file inclusion via notification templates - [apiserver/#4685] / [GHSA-9582-88hr-54w3]
* Fix policy violation tab indicators being populated incorrectly - [frontend/#1172]
* Fix wrong policy violation tab indicator visibility conditions - [frontend/#1175]

For a complete list of changes, refer to the respective GitHub milestones:

* [API server milestone 4.12.6](https://github.com/DependencyTrack/dependency-track/milestone/53?closed=1)
* [Frontend milestone 4.12.6](https://github.com/DependencyTrack/frontend/milestone/38?closed=1)

We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.

Special thanks to everyone who contributed code to implement enhancements and fix defects:  
[@LennartC]

###### dependency-track-apiserver.jar

| Algorithm | Checksum |
|:----------|:---------|
| SHA-1     | f59a0777e631a6bd4e4dc7b42c3df2ac9e8ce4d8         |
| SHA-256   | 4196b1eb91cb27304a53a0b897f0ffb766e3f49607094880618b480ce9ee3124         |

###### dependency-track-bundled.jar

| Algorithm | Checksum |
|:----------|:---------|
| SHA-1     | be4ed743244851cd47873cbbb6c065f0c2eace9d         |
| SHA-256   | e036fc1bd0d0914f421307a59911cb7cab1ba158599b125e404a4a3079e6ea26         |

###### frontend-dist.zip

| Algorithm | Checksum                                                         |
|:----------|:-----------------------------------------------------------------|
| SHA-1     | 118b6fe222bb7192ca15610dd9c0481f055f93b4                         |
| SHA-256   | d3cb53bccb46f20f735ac8716e147d6e99bf7a028ecb492b63aa3718167595ff |

###### Software Bill of Materials (SBOM)

* API Server: [bom.json](https://github.com/DependencyTrack/dependency-track/releases/download/4.12.6/bom.json)
* Frontend: [bom.json](https://github.com/DependencyTrack/frontend/releases/download/4.12.6/bom.json)

[apiserver/#4671]: https://github.com/DependencyTrack/dependency-track/pull/4671
[apiserver/#4673]: https://github.com/DependencyTrack/dependency-track/pull/4673
[apiserver/#4680]: https://github.com/DependencyTrack/dependency-track/pull/4680
[apiserver/#4685]: https://github.com/DependencyTrack/dependency-track/pull/4685

[frontend/#1172]: https://github.com/DependencyTrack/frontend/pull/1172
[frontend/#1175]: https://github.com/DependencyTrack/frontend/pull/1175

[GHSA-9582-88hr-54w3]: https://github.com/DependencyTrack/dependency-track/security/advisories/GHSA-9582-88hr-54w3

[@LennartC]: https://github.com/LennartC
