SignServer Community 7.3.2 Release Notes
COMMUNITY EDITION DECEMBER 2025
The SignServer team is pleased to announce the newest release of our open-source signing software SignServer Community Edition with version 7.3.2.
These release notes cover new SignServer Community features and improvements implemented between SignServer Community 7.1 and SignServer Community 7.3.2.
This community release of SignServer brings expanded REST options and support for WildFly 35. Several CVEs and bugs have also been addressed.
Highlights
REST API Extensions
This release of SignServer includes an enhancement to the REST API that now supports passing files directly for signing. This simplifies integration with CI/CD pipelines, eliminating the need to install SignClient in scenarios where local client installation is inconvenient.
For more information, see REST Interface.
WildFly 35 Support
SignServer now includes support for the WildFly 35 App Server.
Announcements
Security Issues
SignServer 7.3.2 resolves a security issue affecting file enumeration
Keyfactor rates the issue as having a severity level of low with a CVSS score of 2.4. Once 7.3.2 has been generally available across all platforms for at least two weeks, a CVE with the identifier CVE-2025-47220 will be published.
SignServer 7.3.2 resolves a security issue affecting file writing
Keyfactor rates the severity as medium with a CVSS score of CVSS 6.1. Once 7.3.2 has been generally available across all platforms for at least two weeks, a CVE with the identifier CVE-2025-47221 will be published.
SignServer 7.3.2 resolves a security issue affecting class name enumeration
Keyfactor rates the severity as low with a CVSS score of CVSS 2.4. Once 7.3.2 has been generally available across all platforms for at least two weeks, a CVE with the identifier CVE-2025-47222 will be published.
Customers can learn more at support.keyfactor.com.
Upgrade Information
Review the SignServer Upgrade Notes for important information about this release. For upgrade instructions, see Upgrade SignServer.
Downloads and Resources
There are several options available for downloading the latest SignServer Community:
SignServer Community is available for download from GitHub.
SignServer Community container is available for download from Docker Hub.
SignServer Community container is available for download from the AWS marketplace.
SignServer Community is available for download from SourceForge.
Get the latest news about SignServer Community initiatives and open-source products - sign up for our community newsletter.
Find links to downloads, how-to guides, video tutorials, and documentation at signserver.org.
Want to learn more about our open source software? Get in touch over at SignServer Discussions on GitHub, a collective space where you can share feedback and contribute ideas to future releases. Thank you for your continued support and contributions to the SignServer community.