---
title: v4.12.7
type: patch
---

**Fixes:**

* Fix NPE during NVD mirroring via REST API when encountering invalid CPEs - [apiserver/#4734]
* Remove erroneous client-side caching in Trivy analyzer - [apiserver/#4736]
* Fix notification limiting to tags not working reliably - [apiserver/#4737]
* Fix tags from BOM upload request not being applied for existing projects - [apiserver/#4740]
* Fix component properties not being cloned - [apiserver/#4746]

For a complete list of changes, refer to the respective GitHub milestones:

* [API server milestone 4.12.7](https://github.com/DependencyTrack/dependency-track/milestone/54?closed=1)
* [Frontend milestone 4.12.7](https://github.com/DependencyTrack/frontend/milestone/39?closed=1)

We thank all organizations and individuals who contributed to this release, from logging issues to taking part in discussions on GitHub & Slack to testing of fixes.

###### dependency-track-apiserver.jar

| Algorithm | Checksum |
|:----------|:---------|
| SHA-1     | a3a30181b15a14bcd3ea3ef7ed338d2ce5e86bb5         |
| SHA-256   | cc271be5577eee0a562c19acd60a693accbe6b8b1a24294472a43462f6aa94fd         |

###### dependency-track-bundled.jar

| Algorithm | Checksum |
|:----------|:---------|
| SHA-1     | 2c416320eda0aee60a268047643da006ad7edf24         |
| SHA-256   | 48defc20ebe19214bb7cf73bf61f8c09f467d0c8585a5e6c0671ad563bbd4884         |

###### frontend-dist.zip

| Algorithm | Checksum                                                         |
|:----------|:-----------------------------------------------------------------|
| SHA-1     | 4d42a3251d35746bb198018fec273b17a91761e6                         |
| SHA-256   | 8c808d7d4ec2442970e8a79f8bb67b9422a69e377a682a4fe47057e7b0cad642 |

###### Software Bill of Materials (SBOM)

* API Server: [bom.json](https://github.com/DependencyTrack/dependency-track/releases/download/4.12.7/bom.json)
* Frontend: [bom.json](https://github.com/DependencyTrack/frontend/releases/download/4.12.7/bom.json)

[apiserver/#4734]: https://github.com/DependencyTrack/dependency-track/pull/4734
[apiserver/#4736]: https://github.com/DependencyTrack/dependency-track/pull/4736
[apiserver/#4737]: https://github.com/DependencyTrack/dependency-track/pull/4737
[apiserver/#4740]: https://github.com/DependencyTrack/dependency-track/pull/4740
[apiserver/#4746]: https://github.com/DependencyTrack/dependency-track/pull/4746
