📣 Play 2.8.3 Released

The Play Team is proud to announce the release of Play 2.8.3.

📗 What is new?

The following are the main changes of this bugfix release:

• Security Fix - Jsonnode deserializer as module (#10495) - read related CVE announcement
• Security Fix - Json parse on forms (#10495) - read related CVE announcement
• AkkaHttpServer: prevent access to not yet initialized fields (#10323)
• Support injecting default NamedCaffeineCache (#10359)
• Adds ClassActorSystemProvider in the DI (#10382)
• Fixes int binder error message and provides specs (#10413)
• Fix gzip buffering (#10428)

For more details see the full list of changes and the 2.8.3 milestone.

🙇 Credits

Finally, thanks to the community for their help with detailed bug reports, discussion about new features, and pull requests review. Play 2.8.3 is only possible due to the help we had from amazing contributors.

Thanks to Lightbend for their continued sponsorship of the Play core team's efforts. Lightbend offers commercial support for Play.

Special thanks to the following contributors who helped with this release:

• Al-Mothafar Al-Hasan
• Alec Theriault
• Arnout Engelen
• David Pinn
• Geoffrey Yip
• Ignasi Marimon-Clos
• Jacob Wahlgren
• James Roper
• Marcos Pereira
• Matthias Kurz
• Renato Cavalcanti
• Suiyi Fu
• Valy Dia
• Will Sargent
• joe gichuru
• slisaasquatch