OpenIG 6.0.2 Released, OpenIDM 7.0.2 Released

Author: maximthomas

_posts/2026-02-05-openidm-7-0-2-released.md

@@ -0,0 +1,20 @@
+---
+layout: home
+landing-title: "OpenIDM 7.0.2 Released"
+landing-title2: "OpenIDM 7.0.2 Released"
+description: OpenIDM 7.0.2 with security updates and dependency improvements
+keywords: 'OpenIDM, identity management, release, 7.0.2, security update, CVE-2025-25247'
+imageurl: 'openidm-og.png'
+share-buttons: true
+---
+# OpenIDM 7.0.2 Released
+[Download](https://github.com/OpenIdentityPlatform/OpenIDM/releases/tag/7.0.2)
+
+## What's new
+* [CVE-2025-25247](https://nvd.nist.gov/vuln/detail/CVE-2025-25247) - Apache Felix Webconsole XSS vulnerability in services console
+* Updated org.openidentityplatform.openicf dependency to version 2.0.2
+
+Full changeset ([more details](https://github.com/OpenIdentityPlatform/OpenIDM/compare/7.0.1...7.0.2))
+
+## Thanks for the contributions
+<i id="vharseko"><i>1. <a href="https://github.com/vharseko" target="_blank">vharseko</a></i>

_posts/2026-02-05-openig-6-0-2-released.md

@@ -0,0 +1,29 @@
+---
+layout: home
+landing-title: "OpenIG 6.0.2 Released"
+landing-title2: "OpenIG 6.0.2 Released"
+description: OpenIG 6.0.2 with critical security updates and bug fixes
+keywords: 'OpenIG, identity gateway, reverse proxy, release, 6.0.2, security update, CVE-2024-56128, CVE-2025-27818, CVE-2025-27819, CVE-2025-13465'
+imageurl: 'openig-og.png'
+share-buttons: true
+---
+# OpenIG 6.0.2 Released
+[Download](https://github.com/OpenIdentityPlatform/OpenIG/releases/tag/6.0.2)
+
+## What's new
+
+* Fixed ESAPI initialisation error
+* Updated OpenAM to version 16.0.5
+* Addressed critical vulnerabilities:
+  * [CVE-2024-56128](https://nvd.nist.gov/vuln/detail/CVE-2024-56128), [CVE-2025-27818](https://nvd.nist.gov/vuln/detail/CVE-2025-27818), and [CVE-2025-27819](https://nvd.nist.gov/vuln/detail/CVE-2025-27819) - Apache Kafka Deserialization of Untrusted Data vulnerability and Incorrectly Implements Authentication Algorithm
+  * [CVE-2025-13465](https://nvd.nist.gov/vuln/detail/CVE-2025-13465) - Lodash Prototype Pollution vulnerability in `_.unset` and `_.omit` functions
+
+Full changeset ([more details](https://github.com/OpenIdentityPlatform/OpenIG/compare/6.0.1...6.0.2))
+
+## Thanks for the contributions
+
+<i id="vharseko"><i>1. <a href="https://github.com/vharseko" target="_blank">vharseko</a></i>
+
+<i id="maximthomas"><i>2. <a href="https://github.com/maximthomas" target="_blank">maximthomas</a></i>
+
+<i id="dependabot"><i>3. <a href="https://github.com/dependabot" target="_blank">dependabot</a></i>