All News for 2016
This section contains all news items published in 2016.
CVE-2016-6793 Apache Wicket deserialization vulnerability
31 Dec 2016
Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 6.x and 1.5.x Description: Depending on the ISerializer set in the Wicket application, it’s possible that a Wicket’s object deserialized from an untrusted source and utilized by the application to causes the code to enter in an infinite loop....
more
Apache Wicket 8.0.0-M3 released
29 Dec 2016
The Apache Wicket PMC is proud to announce Apache Wicket 8.0.0-M3! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 7.6.0 released
29 Dec 2016
The Apache Wicket PMC is proud to announce Apache Wicket 7.6.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 6.26.0 released
29 Dec 2016
The Apache Wicket PMC is proud to announce Apache Wicket 6.26.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
CVE-2016-6806 Apache Wicket CSRF detection vulnerability
08 Nov 2016
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 6.20.0, 6.21.0, 6.22.0, 6.23.0, 6.24.0, 7.0.0, 7.1.0, 7.2.0, 7.3.0, 7.4.0 and 8.0.0-M1 Description: Affected versions of Apache Wicket provide a CSRF prevention measure that fails to discover some cross origin requests. The mitigation is to not only check the...
more
Apache Wicket 8.0.0-M2 released
26 Oct 2016
The Apache Wicket PMC is proud to announce Apache Wicket 8.0.0-M2! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 7.5.0 released
26 Oct 2016
The Apache Wicket PMC is proud to announce Apache Wicket 7.5.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 6.25.0 released
26 Oct 2016
The Apache Wicket PMC is proud to announce Apache Wicket 6.25.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Wicket 1.5.16 released
05 Aug 2016
This is the sixteenth maintenance release of the Wicket 1.5.x series. This release brings over 2 bug fixes. CHANGELOG for 1.5.16: Bug CVE-2013-2186: Disable (de)serialization of Commons FileUpload items. CVE-2016-3092: Apache Commons Fileupload information disclosure vulnerability To use in Maven: <dependency> <groupId>org.apache.wicket</groupId> <artifactId>wicket-core</artifactId> <version>1.5.16</version> </dependency> Download the full distribution (including...
more
CVE-2016-3092 & CVE-2013-2186 Apache Commons Fileupload vulnerabilities
05 Aug 2016
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: CVE-2016-3092: A malicious client can send file upload requests that cause the HTTP server using the Apache Commons Fileupload library to become unresponsive, preventing the server from servicing other requests. This flaw is not...
more
Apache Wicket 8.0.0-M1 released
25 Jul 2016
The Apache Wicket PMC is proud to announce Apache Wicket 8.0.0-M1! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 7.4.0 released
21 Jul 2016
The Apache Wicket PMC is proud to announce Apache Wicket 7.4.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 6.24.0 released
21 Jul 2016
The Apache Wicket PMC is proud to announce Apache Wicket 6.24.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 7.3.0 released
05 May 2016
The Apache Wicket PMC is proud to announce Apache Wicket 7.3.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
Apache Wicket 6.23.0 released
05 May 2016
The Apache Wicket PMC is proud to announce Apache Wicket 6.23.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find more about Apache Wicket at...
more
CVE-2015-7520 Apache Wicket XSS vulnerability
02 Mar 2016
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: It is possible for JavaScript statements to break out of a RadioGroup’s and CheckBoxMultipleChoice’s “value” attribute of <input> elements This might pose a security threat if the written JavaScript contains user provided data. The...
more
CVE-2015-5347 Apache Wicket XSS vulnerability
01 Mar 2016
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: It is possible for JavaScript statements to break out of a ModalWindow’s title - only quotes are escaped in the JavaScript settings object, allowing JavaScript to be injected into the markup. This might pose...
more
Apache Wicket 6.22.0 released
19 Feb 2016
The Apache Wicket PMC is proud to announce Apache Wicket 6.22.0! This release marks another minor release of Wicket 6. We use semantic versioning for the development of Wicket, and as such no API breaks are present breaks are present in this release compared to 6.0.0. Using this release With...
more
Wicket 1.5.15 released
19 Feb 2016
This is the fifteenth maintenance release of the Wicket 1.5.x series. This release brings over 2 bug fixes. CHANGELOG for 1.5.15: Bug [WICKET-6037] - ModalWindow vulnerable to Javascript injection through title model Escape the generated markup for attribute names and values in CheckBoxMultipleChoice and RadioChoice To use in Maven: <dependency>...
more
Apache Wicket 7.2.0 released
20 Jan 2016
The Apache Wicket PMC is proud to announce Apache Wicket 7.2.0! This release marks another minor release of Wicket 7. We use semantic versioning for the development of Wicket, and as such no API breaks are present breaks are present in this release compared to 7.0.0. New and noteworthy In...
more
All News for 2015
This section contains all news items published in 2015.
Apache Wicket 6.21.0 released
16 Nov 2015
The Apache Wicket PMC is proud to announce Apache Wicket 6.21.0! This release marks another minor release of Wicket 6. We use semantic versioning for the development of Wicket, and as such no API breaks are present breaks are present in this release compared to 6.0.0. Using this release With...
more
Apache Wicket 1.4.x end of life
15 Nov 2015
The Apache Wicket team announces that support for Apache Wicket 1.4.x ends on 16 November 2015. On the same day Wicket 1.5.x enters “security fixes” maintenance mode. This means that after 16 October 2015: no more releases from the 1.4.x branch bugs affecting only the 1.4.x branch will not be...
more
Apache Wicket 7.1.0 released
25 Oct 2015
The Apache Wicket PMC is proud to announce Apache Wicket 7.1.0! This release marks another minor release of Wicket 7. We use semantic versioning for the development of Wicket, and as such no API breaks are present breaks are present in this release compared to 7.0.0. New and noteworthy Significant...
more
Wicket 1.5.14 released
24 Oct 2015
This is the fourteenth maintenance release of the Wicket 1.5.x series. This release brings over 4 bug fixes and 1 improvement. CHANGELOG for 1.5.14: ** Bug * [WICKET-5838] - Last-modified header of external markup is ignored * [WICKET-5927] - Velocity remote code execution * [WICKET-6000] - Wicket 1.5 DTD link...
more
Apache Wicket v7.0 released
28 Jul 2015
The Apache Software Foundation announces Apache Wicket™ v7.0 Open Source Java web framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of nearly 150 Open Source projects and...
more
Apache Wicket 7.0.0-M6 released
21 Jun 2015
The Apache Wicket PMC is proud to announce Apache Wicket 7.0.0-M6! We have released another milestone release for Apache Wicket 7. We aim to finalise Wicket 7 over the coming months and request your help in testing the new major version. Caveats It is still a development version so expect...
more
Apache Wicket 6.20.0 released
14 Jun 2015
The Apache Wicket PMC is proud to announce Apache Wicket 6.20.0! This release marks another minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. Using this...
more
Wicket 1.5.13 released
13 Feb 2015
This is the thirteenth maintenance release of the Wicket 1.5.x series. This release brings over 1 bug fix and 1 improvement.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.13</version>
</dependency>
Download the full distribution (including sources)
more
New committer - Sebastien Briquet
13 Feb 2015
The Project Management Committee (PMC) for Apache Wicket has asked Sebastien Briquet to become a committer and we are pleased to announce that he has accepted. Sebastien has been involved with Wicket for several years now by developing one of the most successful integrations with JavaScript libraries, namely Wicket jQuery...
more
Apache Wicket 7.0.0-M5 released
02 Feb 2015
The Apache Wicket PMC is proud to announce Apache Wicket 7.0.0-M5! We have released another milestone release for Apache Wicket 7. We aim to finalise Wicket 7 over the coming months and request your help in testing the new major version. Caveats It is still a development version so expect...
more
Apache Wicket 6.19.0 released
02 Feb 2015
The Apache Wicket PMC is proud to announce Apache Wicket 6.19.0! This release marks another minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. Using this...
more
All News for 2014
This section contains all news items published in 2014.
Apache Wicket 7.0.0-M4 released
05 Nov 2014
The Apache Wicket PMC is proud to announce Apache Wicket 7.0.0-M4! We have released another milestone release for Apache Wicket 7. We aim to finalise Wicket 7 over the coming months and request your help in testing the new major version. Caveats It is still a development version so expect...
more
Apache Wicket 6.18.0 released
05 Nov 2014
The Apache Wicket PMC is proud to announce Apache Wicket 6.18.0! This release marks another minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. Using this...
more
CVE-2014-3526 - Apache Wicket Information disclosure vulnerability
22 Sep 2014
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.11, 6.16.0 and 7.0.0-M2 Description: When rendering a web page Wicket checks the request url against the one at the render time. It is possible the application to change the page parameters (this includes both the query parameters and...
more
Wicket 1.5.12 released
15 Sep 2014
This is the twelfth maintenance release of the Wicket 1.5.x series. This release brings over 5 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.12</version>
</dependency>
Download the full distribution (including sources)
more
Apache Wicket 6.17.0 released
24 Aug 2014
The Apache Wicket PMC is proud to announce Apache Wicket 6.17.0! This release marks the seventeenth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 7.0.0-M3 released
23 Aug 2014
We have released the third of a series of milestone releases for Apache Wicket 7. We aim to finalise Wicket 7 over the coming months and request your help in testing the new major version. Caveats It is still a development version so expect minor API breaks to happen over...
more
Apache Wicket 6.16.0 released
21 Jun 2014
The Apache Wicket PMC is proud to announce Apache Wicket 6.16.0! This release marks the sixteenth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 7.0.0-M2 released
20 Jun 2014
We have released the first of a series of milestone releases for Apache Wicket 7. We aim to finalise Wicket 7 over the coming months and request your help in testing the new major version. Caveats It is still a development version so expect API breaks to happen over the...
more
Apache Wicket 7.0.0-M1 released
30 Apr 2014
We have released the first of a series of milestone releases for Apache Wicket 7. We aim to finalise Wicket 7 over the coming months and request your help in testing the new major version. Caveats It is still a development version so expect API breaks to happen over the...
more
Apache Wicket 6.15.0 released
23 Apr 2014
The Apache Wicket PMC is proud to announce Apache Wicket 6.15.0! This release marks the fifteenth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
CVE-2014-0043 - Apache Wicket Information disclosure vulnerability
21 Feb 2014
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.10 and 6.13.0 Description: By issuing requests to special urls handled by Wicket it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security...
more
Apache Wicket 6.14.0 released
20 Feb 2014
The Apache Wicket PMC is proud to announce Apache Wicket 6.14.0! This release marks the fourteenth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Wicket 1.5.11 released
06 Feb 2014
This is the eleventh maintenance release of the Wicket 1.5.x series. This release brings over 34 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.11</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.4.23 released
06 Feb 2014
This is twenty thirdth release of the Wicket 1.4.x series. This is a security bugfix release on the 1.4.x branch.
Read CVE-2013-2055 for more information.
Git tag
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.23</version>
</dependency>
Download the full distribution (including source)
more
CVE-2013-2055 - Apache Wicket Information disclosure vulnerability
06 Feb 2014
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.4.22, 1.5.10 and 6.7.0 Description: It is possible to make Wicket deliver the HTML templates in their raw/non-processed form. An attacker could see any sensitive information in the part of the HTML template that is usually ignored during rendering....
more
Apache Wicket 6.13.0 released
05 Jan 2014
The Apache Wicket PMC is proud to announce Apache Wicket 6.13.0! This release marks the thirteenth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
All News for 2013
This section contains all news items published in 2013.
Apache Wicket 6.12.0 released
01 Nov 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.12.0! This release marks the twelfth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 6.11.0 released
20 Sep 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.11.0! This release marks the eleventh minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 6.10.0 released
18 Aug 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.10.0! This release marks the tenth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 6.9.1 released
10 Jul 2013
The Apache Wicket PMC announces Apache Wicket 6.9.1! This is a patch release for 6.9.0 where we inadvertently broke CDI injection into (amongst others) anonymous inner classes. See below for more information regarding this release. Please note that this patch release only fixes WICKET-5264. Starting with Wicket 6 we use...
more
Apache Wicket 6.9.0 released
27 Jun 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.9.0! This release marks the ninth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 6.8.0 released
17 May 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.8.0! This release marks the eighth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. Using...
more
Apache Wicket 6.7.0 released
12 Apr 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.7.0! This release marks the seventh minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
CVE-2012-5636 - Apache Wicket XSS vulnerability
03 Mar 2013
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.4.x, 1.5.x and 1.6.x Description: It is possible for JavaScript statements to break out of a <script> tag in the rendered response. This might pose a security threat if the written JavaScript contains user provided data. This vulnerability is...
more
Wicket 1.5.10 released
26 Feb 2013
This is the tenth maintenance release of the Wicket 1.5.x series. This release brings over 28 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.10</version>
</dependency>
Download the full distribution (including source)
more
Apache Wicket 6.6.0 released
15 Feb 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.6.0! This release marks the sixth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 6.5.0 released
23 Jan 2013
The Apache Wicket PMC is proud to announce Apache Wicket 6.5.0! This release marks the fifth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
All News for 2012
This section contains all news items published in 2012.
Apache Wicket 6.4.0 released
14 Dec 2012
The Apache Wicket PMC is proud to announce Apache Wicket 6.4.0! This release marks the fourth minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 6.3.0 released
16 Nov 2012
The Apache Wicket PMC is proud to announce Apache Wicket 6.3.0! This release marks the third minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Wicket 1.5.9 released
09 Nov 2012
This is the nineth maintenance release of the Wicket 1.5.x series. This release brings over 48 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.9</version>
</dependency>
Download the full distribution (including source)
more
Apache Wicket 6.2.0 released
23 Oct 2012
The Apache Wicket PMC is proud to announce Apache Wicket 6.2.0! This release marks the second minor release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
Apache Wicket 6.1.1 released
08 Oct 2012
The Apache Wicket PMC is proud to announce Apache Wicket 6.1.1! This release marks the first patch release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.1.0 and...
more
Apache Wicket 6.1.0 released
04 Oct 2012
The Apache Wicket PMC is proud to announce Apache Wicket 6.1.0! This release marks the first maintenance release of Wicket 6. Starting with Wicket 6 we use semantic versioning for the future development of Wicket, and as such no API breaks are present in this release compared to 6.0.0. New...
more
CVE-2012-3373 - Apache Wicket XSS vulnerability
06 Sep 2012
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.4.x and 1.5.x Description: It is possible to inject JavaScript statements into an ajax link by adding an encoded null byte to a URL pointing to a Wicket app. This could be done by sending a legitimate user a...
more
Apache Wicket v6.0.0 released
05 Sep 2012
“With great pleasure we announce the availability of Apache Wicket 6.0.0” – Martijn Dashorst, Vice President, Apache Wicket Apache Wicket v6.0.0 is the 6th major release of the popular open source Java web framework. Numerous enhancements make Apache Wicket v6.0.0 a solid choice for web development: Out-of-the box JQuery integration...
more
Wicket 1.4.21 released
05 Sep 2012
This is 21st release of the Wicket 1.4.x series. This is also the last release of the 1.4.x series, rounding up the remaining bugfixes. No further releases will happen in this branch. Git tag Changelog To use in Maven: <dependency> <groupId>org.apache.wicket</groupId> <artifactId>wicket</artifactId> <version>1.4.21</version> </dependency> Download the full distribution (including source)...
more
Wicket 1.5.8 released
24 Aug 2012
This is the eighth maintenance release of the Wicket 1.5.x series. This release brings over 45 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.8</version>
</dependency>
Download the full distribution (including source)
more
Wicket 6.0.0-beta3 released
16 Jul 2012
The Wicket team is proud to announce the third beta release of the Wicket 6.x series. This release is an intermediary release just before we give you 6.0.0 final. There are no more planned API breaks but if you find something that can be made better now it the time...
more
Wicket Native WebSockets support
20 Jun 2012
A new experimental module just landed in Wicket’s Git repository - Wicket Native WebSocket. It provides the support for HTML5 WebSockets in Wicket as the one for Ajax that you may already use in your applications. The full documentation is available at Native WebSocket Wiki A demo application is available...
more
Wicket 1.5.7 released
04 Jun 2012
This is the seventh maintenance release of the Wicket 1.5.x series. This release brings over 26 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.7</version>
</dependency>
Download the full distribution (including source)
more
Wicket 6.0.0-beta2 released
29 May 2012
The Wicket team is proud to announce the second beta release of the Wicket 6.x series. This release brings over many improvements over the 1.5.x series. New and Noteworthy Wicket Atmosphere The Beta 2 contains a new experimental module Wicket Atmosphere, which brings serverside push to Wicket and provides a...
more
Wicket 1.5.6 released
07 May 2012
This is the sixth maintenance release of the Wicket 1.5.x series. This release brings over 40 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.6</version>
</dependency>
Download the full distribution (including source)
more
Wicket 6.0.0-beta1 released
26 Mar 2012
The Wicket team is proud to announce the first beta release of the Wicket 6.x series. This release brings over many improvements over the 1.5.x series. Check the roadmap with a list of the major goals. And the migration guide with all major and some minor changes between 1.5.x and...
more
CVE-2012-1089 - Apache Wicket serving of hidden files vulnerability
22 Mar 2012
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.4.x and 1.5.x Description: It is possible to view the content of any file of a web application by using an Url to a Wicket resource which resolves to a ‘null’ package. With such a Url the attacker can...
more
CVE-2012-0047 - Apache Wicket XSS vulnerability via pageMapName request parameter
22 Mar 2012
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.4.x Apache Wicket 1.3.x and 1.5.x are not affected Description: A Cross Site Scripting (XSS) attack is possible by manipulating the value of ‘wicket:pageMapName’ request parameter. Mitigation: Upgrade to Apache Wicket 1.4.20 or Apache Wicket 1.5.5 Credit: This issue...
more
Wicket 1.5.5 released
12 Mar 2012
This is the fifth maintenance release of the Wicket 1.5.x series. This release brings over 50 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.5</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.4.20 released
12 Mar 2012
This is twentieth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.20</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.5.4 released
23 Jan 2012
This is the fourth maintenance release of the Wicket 1.5.x series. This release brings over 68 bug fixes and improvements.
Git tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.4</version>
</dependency>
Download the full distribution (including source)
more
All News for 2011
This section contains all news items published in 2011.
Wicket 1.5.3 released
14 Nov 2011
This is the third maintenance release of the Wicket 1.5.x series. This release brings over 40 bug fixes and improvements.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.3</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.5.2 released
24 Oct 2011
This is the second maintenance release of the Wicket 1.5.x series. This release brings over 25 bug fixes and 5 improvements.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.2</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.4.19 released
17 Oct 2011
This is nineteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.19</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.5.1 released
29 Sep 2011
This is the first maintenance release of the Wicket 1.5.x series. This release brings over 40 bug fixes and 15 improvements.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket-core</artifactId>
<version>1.5.1</version>
</dependency>
Download the full distribution (including source)
more
Apache Wicket releases Wicket 1.5
07 Sep 2011
The Apache Wicket team is proud to announce the immediate availability of the newest release of their component oriented open source Java web framework. Apache Wicket 1.5 has been in development for the last two years and brings many improvements over previous versions. Downloading Apache Wicket 1.5 You can download...
more
Wicket 1.5-RC7 released
28 Aug 2011
The Wicket Team is proud to introduce the seventh Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-RC5.1 and 1.5-RC7 More detailed migration notes are available on our Migrate to 1.5 Wiki Page Release Artifacts: Subversion tag Changelog RC6...
more
CVE-2011-2712 - Apache Wicket XSS vulnerability
23 Aug 2011
Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.4.x Apache Wicket 1.3.x and 1.5-RCx are not affected Description: With multi window support application configuration and special query parameters it is possible to execute any kind of JavaScript on a site running with the affected versions. Mitigation: Either...
more
Wicket 1.4.18 released
09 Aug 2011
This is eightteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.18</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.5-RC5.1 released
25 Jun 2011
The Wicket Team is proud to introduce the fourth Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-RC4.2 and 1.5-RC5.1 More detailed migration notes are available on our Migrate to 1.5 Wiki Page Release Artifacts: Subversion tag Changelog To...
more
Apache Wicket Cookbook Giveaway Contest
17 May 2011
Packt Publishing has generously allowed me to
give away a free copy of the ebook version of Apache Wicket Cookbook (http://link.packtpub.com/AzN8N9), and a free one year subscription to PacktLib. For details see the contest announcement.
Cheers,
-Igor
more
Wicket 1.5-RC4.2 released
11 May 2011
The Wicket Team is proud to introduce the fourth Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-RC3 and 1.5-RC4.2 More detailed migration notes are available on our Migrate to 1.5 Wiki Page Release Artifacts: Subversion tag Changelog To...
more
Wicket 1.5-RC3 released
02 Apr 2011
The Wicket Team is proud to introduce the third Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-rc2 and 1.5-RC3 More detailed migration notes are available on our Migrate to 1.5 Wiki Page Release Artifacts: Subversion tag Changelog To...
more
Wicket 1.4.17 released
02 Apr 2011
This is seventeenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.17</version>
</dependency>
Download the full distribution (including source)
more
Apache Wicket Cookbook Published!
25 Mar 2011
For the past nine months I have been quietly working on a book about Wicket. Unlike other books on the market this one does not attempt to teach you Wicket from the ground up. Instead, it is for developers who already know the basics and want to learn how to...
more
Wicket 1.5-rc2 released
25 Feb 2011
The Wicket Team is proud to introduce the second Release Candidate in Wicket 1.5 series. See the changelog for the list of bug fixes and improvements done between 1.5-RC1 and 1.5-rc2 More detailed migration notes are available on our Migrate to 1.5 Wiki Page Release Artifacts: Subversion tag Changelog To...
more
Wicket 1.4.16 released
25 Feb 2011
This is sixteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.16</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.5-RC1 released
22 Jan 2011
The Wicket Team is proud to introduce the first Release Candidate in Wicket 1.5 series. The 1.5 series provides the following major improvements: A more powerful and flexible request processing pipeline Intercomponent event mechanism Improved configuration More flexible markup loading Better proxy support (x-forwarded-for header) More detailed migration notes are...
more
All News for 2010
This section contains all news items published in 2010.
Wicket 1.4.15 released
24 Dec 2010
This is fifteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.15</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.4.14 released
29 Nov 2010
This is fourteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.14</version>
</dependency>
Download the full distribution (including source)
more
Pedro Santos is a Wicket team member
21 Nov 2010
Pedro Santos has been added as a committer and PMC member for Apache Wicket. Pedro has been increasingly active in the Wicket community in recent months, and his patches continue to improve in quality. Additionally, Pedro is always willing to do the “grunt work” of creating great test cases for...
more
Wicket 1.5-M3 released
05 Nov 2010
This is another milestone release from trunk (in-development branch). This release includes several enhancments and fixes, which can be seen in the changelog (linked below).
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.5-M3</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.4.13 released
01 Nov 2010
This is thirteenth release of the Wicket 1.4.x series. This is primarily a minor bugfix release on the 1.4.x (stable) branch.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.13</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.5-M2.1 released
17 Sep 2010
This is the second milestone of the new 1.5.x Wicket series. The focus of 1.5.x is to provide our users with a more powerful and flexible request processing pipeline. This release is NOT production-ready, it is more of a technology demo that should facilitate user-feedback we can fold into the...
more
Wicket 1.4.12 released
17 Sep 2010
This is the twelfth maintenance release of the 1.4.x series. This release brings a fix to a critical bug which prevented ajax form submits in FireFox.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.12</version>
</dependency>
Download the full distribution (including source)
more
Wicket 1.4.11 released
09 Sep 2010
This is the eleventh maintenance release of the 1.4.x series and brings over
fifty bug fixes and improvements.
Subversion tag
Changelog
To use in Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.11</version>
</dependency>
Download the full distribution (including source)
more
Peter Ertl is a Wicket team member
24 Aug 2010
The Apache Wicket team is proud to have Peter Ertl as a new member to the team of developers. Peter has been active in our community for a long time now and has contributed many patches, reported many bugs as well as helping out on the user list. Welcome Peter!...
more
Wicket 1.5-M1 released
11 Aug 2010
This is the first milestone of the new 1.5.x Wicket series. The focus of 1.5.x is to provide our users with a more powerful and flexible request processing pipeline. This release is NOT production-ready, it is more of a technology demo that should facilitate user-feedback we can fold into the...
more
Wicket 1.4.10 released
11 Aug 2010
This is the tenth maintenance release of the 1.4.x series and brings over thirty bug fixes and improvements. As well as bringing bug fixes and small improvements, 1.4.10 brings two major new features: Delayed component initialization Component configuration Delayed component initialization allows developers to initialize their components outside of a...
more
Martin Grigorov is a Wicket team member
04 Aug 2010
The Apache Wicket team is proud to have Martin Grigorov as a new member to the team of developers. Martin has provided many high quality patches and didn’t just pick the easy bugs either. He’s also very active on the user list and contributes to several Wicket Stuff projects. Welcome...
more
Wicket 1.4.9 released
24 May 2010
This is the ninth maintenance release of the 1.4.x series and brings over fifteen bug fixes and improvements. Subversion tag Changelog To use in Maven: <dependency> <groupId>org.apache.wicket</groupId> <artifactId>wicket</artifactId> <version>1.4.9</version> </dependency> Download the full distribution (including source) It is worth noting that WICKET-2846 will be reverted in the next release because...
more
Wicket 1.4.8 released
03 May 2010
Wicket 1.4.8 is released!
This is the eighth maintenance release of 1.4.x series and brings over
20 bug fixes and improvements.
SVN tag
Using Maven:
<dependency>
<groupId>org.apache.wicket</groupId>
<artifactId>wicket</artifactId>
<version>1.4.8</version>
</dependency>
Download
Change log
more
Wicket 1.4.7 released
05 Mar 2010
The Apache Wicket project is proud to announce the seventh maintenance release of Apache Wicket 1.4. This releases brings over 30 improvements and bug fixes. Download Apache Wicket 1.4.7 You can download the release here: http://www.apache.org/dyn/closer.cgi/wicket/1.4.7 Or use this in your Maven pom’s to upgrade to the new version: <dependency>...
more
Wicket 1.4.6 released
01 Feb 2010
The Apache Wicket project is proud to announce the sixths maintenance release of Apache Wicket 1.4. This releases brings over 40 improvements and bug fixes that make Wicket 1.4 even more stable in production environments. Download Apache Wicket 1.4.6 You can download the release here: http://www.apache.org/dyn/closer.cgi/wicket/1.4.6 Or use this in...
more
All News for 2009
This section contains all news items published in 2009.
Wicket 1.4.5 released
21 Dec 2009
The Apache Wicket project is proud to announce the fifth maintenance release of Apache Wicket 1.4. This releases mainly fixes WICKET-2613 which has caused certain applications to stop functioning properly in production environments. Download Apache Wicket 1.4 You can download the release here: http://www.apache.org/dyn/closer.cgi/wicket/1.4.5 Or use this in your Maven...
more
Wicket 1.4.4 released
13 Dec 2009
The Apache Wicket project is proud to announce the fourth maintenance release of Apache Wicket 1.4. Download Apache Wicket 1.4.4 You can download the release here: http://www.apache.org/dyn/closer.cgi/wicket/1.4.4 Or use this in your Maven pom’s to upgrade to the new version: <dependency> <groupId>org.apache.wicket</groupId> <artifactId>wicket</artifactId> <version>1.4.4</version> </dependency> Changes A complete list of...
more
Wicket 1.4.3 released
24 Oct 2009
The Apache Wicket project is proud to announce the third maintenance release of Apache Wicket 1.4. Download Apache Wicket 1.4.3 You can download the release here: http://www.apache.org/dyn/closer.cgi/wicket/1.4.3 Or use this in your Maven pom’s to upgrade to the new version: <dependency> <groupId>org.apache.wicket</groupId> <artifactId>wicket</artifactId> <version>1.4.3</version> </dependency> Changes A complete list of...
more
Wicket 1.4.2 released
12 Oct 2009
The Apache Wicket project is proud to announce the second maintenance release of Apache Wicket 1.4. Download Apache Wicket 1.4.2 You can download the release here: http://www.apache.org/dyn/closer.cgi/wicket/1.4.2 Or use this in your Maven pom’s to upgrade to the new version: <dependency> <groupId>org.apache.wicket</groupId> <artifactId>wicket</artifactId> <version>1.4.2</version> </dependency> Changes A complete list of...
more
Wicket 1.4.1 released
21 Aug 2009
The Apache Wicket project is proud to announce the first maintenance release of Apache Wicket 1.4. Download Apache Wicket 1.4 You can download the release here: http://www.apache.org/dyn/closer.cgi/wicket/1.4.1 Or use this in your Maven pom’s to upgrade to the new version: <dependency> <groupId>org.apache.wicket</groupId> <artifactId>wicket</artifactId> <version>1.4.1</version> </dependency> Changes The most notable change...
more
Apache Wicket 1.4 takes typesafety to the next level
30 Jul 2009
The Apache Wicket project is proud to announce the release of Apache Wicket 1.4. Apache Wicket is an open source, component oriented Java web application framework. With overwhelming support from the user community, this release marks a departure from the past where we leave Java 1.4 behind and we require...
more
Apache Wicket 1.3.7 marks end of life for Wicket 1.3
30 Jul 2009
The Apache Wicket team is proud to present the release of Apache Wicket 1.3.7. This will be the last feature release for the 1.3.x branch. Going forward, only security fixes will be released in the 1.3.x branch - meaning that 1.3.7 may be the last release in this branch. All...
more