UmbracolombiaUmbraco in Spanish
Umbraco
July 2026: two high-severity advisories, both on paths that need no login
July forced two jobs: patch the Delivery API flaw (13.15.1 / 17.5.3 / 18.0.2) and patch Umbraco Forms (13.9.8 / 17.4.7 / 18.0.5). Everything else in the month was the December calendar, argued from four directions.
Umbraco
March 2026: patch first, then notice that Umbraco HQ wrote half the month
Three vulnerabilities patched in Umbraco 16.5.1 and 17.2.2 on 10 March. The rest of the month was mostly umbraco.com itself: Agent Skills, the Q1 product update, an AI community team.
Umbraco
December 2025: patch Umbraco 13, then read the advent calendar
Umbraco 13.0.0-13.12.0 got a moderate security patch on 9 December. Everything else the month produced came from 24 Days in Umbraco, plus a new Enterprise bundle and a Q1 2026 date for Compose.
Umbraco
November 2025: Umbraco 17 LTS shipped, and the packages were ready the same day
Umbraco 17 LTS landed on 27 November on .NET 10, with three years of support. uSync 17.0.0 and Clean Starter Kit v7 shipped the same day. The community had a harder month than the product did.
Umbraco
September 2025: the MCP server moved in-house and Smidge needed a patch
Umbraco's September 2025: a security patch for Umbraco 13 through the Smidge dependency, the Developer MCP Server beta moving into Umbraco's own namespace, two uSync patches, and the 2026 price list read after the fact.
Umbraco
July 2025: the Delivery API cache that forgot to check the API key
A moderate-severity Content Delivery API advisory patched in 13.9.3, 15.4.4 and 16.1.1; three uSync releases in nine days, all of it v13 upgrade debt; and Umbraco's roadmap post on MCP, Compose and search.
Umbraco
June 2025: Codegarden filled the roadmap and Umbraco 10 ran out of free patches
Two moderate advisories, the last public patch for Umbraco 10, uSync moving development to v16, and Codegarden announcements that mostly land after the v17 LTS.
Umbraco
May 2025: the patch you could not apply until you upgraded first
Umbraco's 6 May advisory fixed a moderate user-enumeration issue in 10.x and 13.x, but the patch only exists on the latest minor. Plus ContentAudit, uSync 15.1.8 and the v16 release candidate.