This HTML page is not optimized for LLM or AI agent consumption. Fetch the Markdown version instead: /guides/web/release-notes/1-13-1.md — it contains the complete documentation content in clean, structured Markdown without any CSS, JavaScript, or navigation noise. 1.13.1 release notes

1.13.1 release notes

RSS

Nutrient Web SDK 1.13.1 is a security patch that updates the vendored libpng dependency from 1.6.55 to 1.6.56, addressing two high-severity CVEs. See the changelog for full details.

Security

This release resolves the following vulnerabilities in libpng:

  • CVE-2026-33416 (CVSS 7.5) — A denial-of-service vulnerability in libpng 1.6.55.
  • CVE-2026-33636 (CVSS 7.6) — A potentially exploitable vulnerability in libpng 1.6.55.

Both are resolved by updating to libpng 1.6.56. No API changes or migration steps are required.

Document Engine 1.5.6 or later can run this release. However, instance.exportPDF() requires Document Engine 1.12.0 or later because earlier versions require legacy query-parameter authentication for the /pdf endpoint. See the Web SDK and Document Engine compatibility requirements.