---
title: v4.2.2
type: patch
---

**Features:**

**Fixes:**
* Resolved issue originating from changes in the NVD JSON feed which prevented the identification of vulnerabilities by a components CPE. ([#1018](https://github.com/DependencyTrack/dependency-track/issues/1018)), ([#1033](https://github.com/DependencyTrack/dependency-track/issues/1033))

**Security:**

**Upgrade Notes:**


###### [dependency-track-apiserver.war](https://github.com/DependencyTrack/dependency-track/releases/download/4.2.2/dependency-track-apiserver.war)

| Algorithm | Checksum |
| SHA-1     | 60a87ecafd9ba4b0ba119a65e1a041b0c5f576ea |
| SHA-256   | bd20dbee794fa0c37c345526204058dbfbdd734acaf257783f9cb47e2cf17c63 |

###### [dependency-track-bundled.war](https://github.com/DependencyTrack/dependency-track/releases/download/4.2.2/dependency-track-bundled.war)

| Algorithm | Checksum |
| SHA-1     | 748b3fbf89efb61d29a468e3cd1c90bfcaeb3c4e |
| SHA-256   | 93948be57b0e7864b872a2869c840c50bf9f2b3d1e9cc75794abea4c53038851 |

###### [dependency-track.war](https://github.com/DependencyTrack/dependency-track/releases/download/4.2.2/dependency-track.war)

| Algorithm | Checksum |
| SHA-1     | 35b61e4309303a7ad605c21cfa5eddcbabcfa15f |
| SHA-256   | 965508b98df6701ffea13ec9bcfb2f3d8a7e14eba95a68f5c266a2b75b1db109 |

###### Software Bill of Materials (SBOM) ######

[bom.json](https://github.com/DependencyTrack/dependency-track/releases/download/4.2.2/bom.json)
[bom.xml](https://github.com/DependencyTrack/dependency-track/releases/download/4.2.2/bom.xml)