April 2026 - Dashboard Release Notes

Column, Stacked Column and 100% Stacked Column charts allow the displaying of values and percentages, we added an attribute that allows the user to display these values horizontally or vertically (previously it was always vertical). This was made to allow better presentation of the data specially in small charts.

Show Data Horizontally ticked

Open

Show Data Horizontally unticked

Open

Improvements have been made to the multi-selection modal. This affects the Multipicker Category object as well as other areas (for example the IN filters on Targets) that allow multiple selections. Previously, you would have the following batch options available:

• ‘All’: Would select all of the options on this page NOT all of the available options

• ‘None’: Would deselect all selected options including those not on the currently visible page of results

The usability of this modal has been improved with these selection options available instead:

• Select ‘All’: Selects all available options

• Select ‘Page’: Selects all items on the current page

• Deselect ‘All’: Deselects all selected items

• Deselect ‘Page’: Deselects all selected items on the current page

Open

The scope of the ‘All’ option is reduced to that of only the filtered results if one is applied, it will not affect any items outside the result set of the active filter.

In addition to these changes, the accessibility of this modal has been improved with these options now available to be selected and ‘pressed’ via key presses. The following messagesStatic entries have also been added:

Provided the ability to add custom certs for JDBC database connections. To add custom certificates to support SSL connections to databases, copy any Keytool compatible certificates to the custom_cacerts folder located in <Dashboard Root>/Tomcat/custom_cacerts. Ensure that only valid certificate files are added to this directory. Once added, proceed to Apply & Run the configuration tool. For more information on compatible certificates, please see the keytool javadocs.

Pre-requisites:

Linux/Docker - Java JRE including Keytool must be available on path.

Aligned and added the missing parameters when exporting Table and Rotated Table charts to Word and PowerPoint. This fix also sorted out the same problem when these charts are exported via Reports.

Fixed a bug that would result in an error being thrown when attempting to save a Chart after removing its password protection.

An improvement has been made to how we pass chart data to the LLM during AI summary operations. Previously, chart information was converted to a CSV string that resided on the page. This can cause a slowdown in chart rendering times, especially if there is a lot of data. We have now skipped this CSV embedding and taken the information on the available chart data and passed that to the LLM in a JSON format.

As was the case prior to the 2025_10 release, images within Card Charts that are larger than their assigned sections should now scale down to fit rather than retain their size but be cut off.

Since the February release, the Dashboard would fail to start up if certain directories like ‘themes’ had been mounted as read-only. This has now been resolved.

Due to duplicate entries being created in the mis_user_categories_or_roles database table when a User edited a Role or Category, certain API endpoints could return multiple entries relating to the Categories and Roles a user has access to. This also impacted the User Sync Payload returned for that user. This issue has now been resolved by ensuring only unique entries are returned.

The configuration tool GUI used by the sysadmin in graphical environments has been overhauled to be based on a much lighter-weight framework. This results in a significantly smaller package because the operating system webview is used rather than a bundled version of Chrome. As a result, it is also more likely to run on Windows server environments without hitting issues with the GPU and Sandboxing.

An issue existed when using the AI features with streaming responses in conjunction with a reverse proxy. This has now been resolved.

Our regular pen-testing uncovered a historic XSS issue in a specific piece of functionality. This has now been resolved.

As part of our work to keep all libraries and frameworks up-to-date, Angular has been upgraded to v12.

There has been a minor upgrade to Tomcat from v10.1.50 to v10.1.54 in order to resolve CVE-2026-24734.

Upgraded io.micronaut:micronaut-http-client from v3.9.4 to v3.10.5 in order to address CVE-2026-33013.

This upgrade from v1.58.0 to v1.59.1 resolved 58 recent vulnerabilities related to Chrome, the following of which were classified as Critical:

• CVE-2026-3061

• CVE-2026-3062

• CVE-2026-3545

• CVE-2026-3916

Since upgrading to Tomcat v10.1.50 in the 2026_02 release, the upgrade script has failed to verify the Tomcat version correctly, resulting in it failing. This issue has now been resolved.

Removed the flag ‘useCanonCaches’ from the Apache Commons Demon project. This flag was provided to the JVM options for Windows installations. This flag was already not being accepted, so this should result in no change in behaviour to Windows installations.

Crypto has been upgraded to v0.49.0 and Filippo has been upgraded to v1.1.1 within the scheduler project to resolve vulnerability CVE-2026-26958.

Both the Configuration Tool and Excel Reader projects have had minor version upgrades to resolve vulnerabilities. GO has been upgraded from v1.25.7 to v1.25.8, and the Fillipo library has been upgraded from v1.1.0 to v1.1.1.

The JDBC driver for an Athena data connection has been upgrade from version v2.0.28 to version v3.7.0 in order to resolve CVE-2025-68161 - a Medium Risk Vulnerability. In addition to this, the driver has been moved to being managed via our Dynamic Driver functionality (documentation link) meaning it is no longer within the shipped ‘jdbc_drivers’ directory but will instead be pulled into the ‘dynamic_drivers' directory if you have any Athena data connections configured.

Grails has been upgraded to the latest minor version available, resolving various vulnerabilities, including four whose severity was rated as High: CVE-2026-33871, CVE-2026-22731, CVE-2026-22733, CVE-2026-33870.

Added show data horizontally column in the hierarchies table

pi#3537, pi#3524

37043

mis_hierarchies.show_data_horizontally