UmbracolombiaUmbraco in Spanish
Umbraco
July 2025: the Delivery API cache that forgot to check the API key
A moderate-severity Content Delivery API advisory patched in 13.9.3, 15.4.4 and 16.1.1; three uSync releases in nine days, all of it v13 upgrade debt; and Umbraco's roadmap post on MCP, Compose and search.
Umbraco
June 2025: Codegarden filled the roadmap and Umbraco 10 ran out of free patches
Two moderate advisories, the last public patch for Umbraco 10, uSync moving development to v16, and Codegarden announcements that mostly land after the v17 LTS.
Umbraco
May 2025: the patch you could not apply until you upgraded first
Umbraco's 6 May advisory fixed a moderate user-enumeration issue in 10.x and 13.x, but the patch only exists on the latest minor. Plus ContentAudit, uSync 15.1.8 and the v16 release candidate.
Umbraco
April 2025: the advisory got worse three days after the patch shipped
Umbraco patched CMS 14 and 15 on April 8 and raised the severity from moderate to high on April 11. Plus Canadian hosting, Flexible Environments, SSO, and uSync 15.1.6.
Umbraco
March 2025: the Umbraco patch you could not apply where you stood
March's advisory fixed two moderate CMS issues plus a high-severity ImageSharp CVE, but only on the latest minor of each supported major. Also: uSync 13.2.7 and 15.1.5, a V8-to-V13 upgrade written up honestly, and a backoffice accessibility fix.
Umbraco
January 2025: the patch was easy, getting to the patch was not
Three moderate-severity issues patched on 21 January 2025 in Umbraco 10.8.8, 13.5.3, 14.3.2 and 15.1.2 — and the catch is that you must already be on the latest minor. Six items in the whole month, half of them from Umbraco HQ.