Skip to main content

· 3 min read
info

WMO (WaveMaker Online) Users​

Updated on 24-Jan-2022

WaveMaker has released 10.11.1 on 24 Jan 2021, updating Log4j2 dependency, which mitigates against the vulnerability CVE-2021-44832. For more information about the release, see WaveMaker 10.11.1.

  • Log4j2 upgraded to 2.17.1

Updated on 23-Dec-2021

WMO (WaveMaker Online) has released 10.10.3 on 23 Dec 2021, updating Log4j2 dependency, which mitigates against the vulnerability CVE-2021-45105. For more information about the release, see WaveMaker 10.10.3.

  • Log4j2 upgraded to 2.17.0

Updated on 16-Dec-2021

WMO (WaveMaker Online) has released 10.10.2 on 16 Dec 2021, updating Spring and Log4j2 dependencies, which mitigates against vulnerabilities CVE-2021-44228 and CVE-2021-22096. For more information about the release, see WaveMaker 10.10.2.

  • Log4j2 upgraded to 2.16.0
  • Spring Framework upgraded to 5.3.13

Action items​

  1. If you are a WaveMaker Online (WMO) user and have already mitigated risk by adding Log4j2 dependencies to 2.15.0 or 2.16.0 or 2.17.0, you need to undo those changes from the <dependencies> section in pom.xml.

  2. Also, there is no need to add the System property or Environment variable in the deployment section if you redeploy with the latest project build.

caution

WME (WaveMaker Enterprise) Users​

WaveMaker Enterprise users should continue to follow the risk mitigation provided in this blog.

A zero-day vulnerability is an unintentional software security flaw identified in the application, poses a zero-day threat.

A new zero-day vulnerability was reported in the Log4j2 library on 9th Dec 2021, affecting the library versions >=2.0-beta9 and <=2.14. It has the potential to allow an attacker to execute the code remotely. Log4j has provided the fix by releasing the 2.15.0 version on the same day. Plus, Log4j has released a newer 2.17.0 version, which is available for production now. For more information, see LOG4J changes report.

· 4 min read

The End of Support (EOS) stage marks the official withdrawal of support for WaveMaker 9.x projects.

WaveMaker app development generates Angular code, as Angular marks the official withdrawal of the previous Angular versions, including AngularJS and Angular 1.x. Therefore, WaveMaker will be ending the support of WaveMaker 9.x projects that use AngularJS and Angular 1.x by 31 Jan 2022, as Angular announced. The update is primarily focused on improving performance, security, and bug fixes.

We have covered some essential FAQs to help you understand how you can migrate to the latest version of WaveMaker Studio.

· 4 min read

Project branching allows developers to checkout code from the existing git branch and isolates their work from others. If you are a member of WaveMaker Teams, read further to understand best practices for managing branches in WaveMaker.

· 2 min read

WaveMaker currently generates code based on Angular 9 for applications. With the announcement on ending support of Angular 9, we are upgrading to the next Angular version, 10.2.5.

Consequently, we have developed a roadmap to update the platform with the Release 10.9 scheduled for the 13th of September 2021, which includes the Angular 10 update. If you are a WaveMaker application developer who uses your own infrastructure to build and deploy the application, you need to read further.

This update requires you to take action, i.e., updating the Node and NPM versions. To avoid breaking changes, we have recommended the following steps described in this blog post.

· 3 min read

Accessibility is essential for individuals and organizations that want to create high-quality websites and applications. It enables people with disabilities to use different Assistive Technologies (AT) and Adaptive Strategies for the business benefits of Web Accessibility. WaveMaker also focuses on enabling their product with international standards for Web Accessibility from World Wide Web Consortium (W3C), including Web Content Accessibility Guidelines (WCAG) and Web Accessibility Initiative - Accessible Rich Internet Applications (WAI-ARIA) as the first step in applying them.

· 2 min read

Android App Bundle (aab) is a new and an alternate to Android application package (apk). Google introduced this format mainly to reduce the size of installer for end users. Please check this post from Google to learn about aab. Starting from @wavemaker/wm-cordova-cli@2.0.0, generation of aab files from WaveMaker mobile projects is supported.

· 3 min read

WaveMaker platform offers the feature for applications to integrate with external databases like MySQL, SQLServer, Oracle, IBM DB2, PostgreSQL, Amazon Redshift, SAP HANA.

These database import flows have now been optimised to enable faster database imports in the application. Let's have a look ahead on how this was done and how would this affect the app developers.

· 4 min read

WaveMaker supports Redshift architecture to develop WaveMaker apps by importing the Redshift database into the Studio. You can customize tables and perform queries like any other databases supported by WaveMaker to present data in the UI.

· 3 min read

With constantly changing business needs, WaveMaker puts forward a seamless integration with the SAP HANA database. Develop personalized, intelligent solutions and customer experiences end to end by enabling CRUD (Create, Read, Update and Delete) operations across WaveMaker applications.