Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Scroll Ignore

This release includes the following enhancements.

Table of Contents
maxLevel2

Release Initial release date: October 14, 2025
Latest update (SOAtest and Virtualize): 2025.3.5 (August 24, 2026)
Latest update (CTP): 2025.3.6 (August 24, 2026)

Automatic Identification of Manual Tests Impacted by Application Changes

You can now identify an optimized subset of manual tests that need to be run to sufficiently test recent application changes or perform manual regression testing for release. This allows your team to focus testing on only a specific set of tests while still having the confidence that sufficient testing was done.

You can see a real-time view of the execution status of each manual test for a given application in a given environment - passed, failed, incomplete, impacted (needs retesting), or not executed. This view automatically updates as you execute tests or whenever the application changes. If the underlying code that is associated with a previously executed manual test changes, the view will automatically update the test status to show that it is impacted and needs retesting. With this summary, you can focus your efforts on manual tests that are impacted or haven't been run yet. If a test is shown as passing and is not impacted - you know that you don't need to run the test again, even if the build has been updated since you ran the test.

Additional updates:

  • The process for collecting code coverage for manual tests has been streamlined.
  • In addition, Manual Testing in CTP now requires a separate license.

    Easier Generation of Dynamic Lists in Response Payloads

    New JSON and XML list processors in Virtualize List Processor tools allow you to select items from a request payload payload to be processed individually, enabling you to build a dynamic list for use in a responsean outgoing payload based on the content of those items. They can be used by chaining it chained to another tool (for example, a message responder or REST client) or used as stand-alone tools. By iterating over each selected item in a request payload, you can dynamically build a list of items for a response payload using data from the items in the request payload. Each selected item can be processed The tools process each selected item individually, allowing you to perform data source lookups or other processing steps to generate item-specific response contentcontent to include in the outgoing payload (such as details for an item id specified in the original payload). The tools aggregate each response outgoing item into a list that can be is inserted into a response payload.the outgoing payload. A primary use case is to build response payloads in Virtualize based on the content included within incoming requests.

    These tools replace the Multiple Response Generator, which is now deprecated, and adds support add support for JSON (whereas the Multiple Responses Response Generator only supported XML) while removing the need for multiple virtual assets (a "front-end asset" and "back-end asset") to be deployed to support the use case.

    See JSON List Processor and XML List Processor for more information about these tools.


    Viewing Asset Utilization by Team or Project


    The Asset Utilization Report in CTP supports multiple new features to make it easier for organizations to understand their usage of Parasoft Virtualize.

    Data can now be reported by team or by project when you organize assets on Virtualize servers using folders in the VirtualAssets project. The By default the report now groups data by folders by default, so that when you first view the report it is easy to see usage broken down by folder when first viewing the report. When folders are used to separate assets aggregated by team or by project , you can gain insight into asset usage per team or per projector any other organization method you choose.

    The report also supports new metrics: Peak Hits per Second and Average Hits per Second. This data allows you to get a better understanding of which teams and/or assets have the highest usage spikes.

    Data in the report can now be exported to a CSV file, easily enabling the data to be consumed and processed by external tools.


    AI Assistant and AI Tool Enhancements

    Test scenarios created from the AI Assistant now contain assertions if the user includes instructions to perform validation of specific requirements. Assertions are created by adding LLM-enabled AI Assertor tools to appropriate REST Clients within the scenarios. See Creating Tests with the AI Assistant for more information.
    The The AI Assistant now supports creation of test scenarios that span multiple microservices by allowing you to specify multiple service definition files.

    The AI Assertor and AI Data Bank tools can now be applied to web browser test scenarios by chaining them to the Browser Contents output of Brower Playback Tools.

    MCP Client and MCP Listener Enhancements

    • MCP Client now supports OAuth and Basic authentication.
    • MCP Listener has updated the heartbeat mechanism and added the ability to disable heartbeat.
    • Both MCP Client and MCP Listener now support the Streamable HTTP transport.
    Notification

    Identify When Virtual GraphQL Services Need to be Updated

    You can now identify incoming GraphQL queries to the Virtualize server that no longer adhere to an updated the schema for a GraphQL service, so that callers know they need to update their GraphQL queries and their GraphQL responders to match when the updated schema changes. This is done through the new GraphQL Query Validator tool, which validates GraphQL queries against a schema defined using Schema Definition Language (SDL). The new tool can be attached to any tool that sends or receives messages in GraphQL format to verify that the queries are valid. See GraphQL Query Validator for more information. 

    Adding MIME Attachments to Outgoing Messages
    Anchor
    MIME
    MIME

    The new Attachments tool allows you to add MIME attachments to an outgoing message before it is sent. This tool is primarily used to add binary attachments to a SOAP message according to the "SOAP with Attachments" (SwA) specification. This replaces the SwA functionality that was removed in the 2024.1 release. See Attachments Tool for more information.

    Additional Updates

    • SOAtest and Virtualize now ships with Eclipse 2025-09.
    • Support for Windows 10 has now ended.
    • You can now specify a request or response for the asynchronous socket listener and transport using hex values in a String, making it easier to configure the payloads. See Asynchronous Socket Transport and Asynchronous Socket Listener for more information.
    • CTP users with an LLM Integration license can now access the Parasoft Intelligent Digital Assistance Assistant (IDA) from the Help menu in CTP. The Parasoft IDA is an LLM-powered chatbot designed to answer user's questions about Parasoft products.
    • It is no longer necessary to pass a license to the Java or .NET coverage tools shipped with SOAtest when when creating a static coverage file for usage in application coverage workflows.

    • Parasoft Search now scans environments in .tst and .pva files.
    • SOAtest reports now include errors for .tst files that did not run because SOAtest couldn't open them.
    • Standalone tools now resolve variables in the input tab text mode.
    • Remote OS Command Injection (Time Based) rule added to supported Penetration Testing Rules.

    Resolved PRs and FRs

    SOAtest and Virtualize

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CTP-10188Limit history in new test execution jobs to 10 runs by default
    CTP-10365When creating PVA in CTP, HTTP endpoint is not created
    CTP-10439Resolve ${dtp_project} variable in EM component coverage build ID
    CTP-10481Aggregate hit statistic summaries in the background to speed up report load time
    LT-1614Cannot load reports over 2GB
    SOA-18611YAML .tst with large traffic in Traffic Viewers takes long time to open
    SOA-18640FTP Client throwing exception: Algorithm negotiation fail
    SOA-18651Some test assets no longer open after being resaved
    SOA-18715Leading "." not ignored in the "Domain" attribute of the "Set-Cookie" header
    SOA-18743Only one data source row used for individually runnable test with parameterized output tool
    SOA-18796Ignore Chrome 140 requests to https://www.google.com/async/folae?async=_fmt:pb
    SOA-18852Empty string not accepted in Form Input for "dateTime" if "Enforce schema type" disabled
    VIRT-7866Open API definition with wild card content creates Form JSON view with XML errors
    VIRT-7971"Generate Data Repository Data Source" option not available in responder when status code is parameterized
    VIRT-7973Cache failed authentication credentials to avoid frequent polling of CTP/PSTsec
    VIRT-7981Parasoft JDBC Driver - recording select that joins tables with same columns without alias submits result that are missing columns

    CTP

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CTP-10188Limit history in new test execution jobs to 10 runs by default
    CTP-10365When creating PVA in CTP, HTTP endpoint is not created
    CTP-10439Resolve ${dtp_project} variable in EM component coverage build ID
    CTP-10481Aggregate hit statistic summaries in the background to speed up report load time

    Updates in 2025.3.1

    SOAtest and Virtualize

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2025-66614Critical vulnerability resolved by updating to tomcat version 10.1.52
    SOA-19034Disabled test suites set test variables
    VIRT-8076Hybrid mode improved to be more robust when the Virtualize server is offline

    CTP

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CTP-10633HTTP listener setting is not correctly applied and always resets to Virtualize server port
    CTP-10640Lazy load test execution job histories when expanding a job in the tree
    CTP-10675Aggregate hit statistic data in the background every 30 minutes for the utilization report
    CTP-10677Optimize loading large number of test execution jobs on the resource permissions page
    CTP-10699Lazy load folders and sub-folders in the Virtual Assets page

    Updates in 2025.3.2

    SOAtest and Virtualize

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-29145Critical vulnerability resolved by updating to tomcat version 10.1.54
    CVE-2026-34197High-severity vulnerability resolved by updating to ActiveMQ version 5.19.5
    SOA-19243Data source payloads containing environment variables no longer resolve

    CTP

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CTP-10827Test execution jobs with long error messages use up lots of memory in CTP

    Updates in 2025.3.3

    SOAtest and Virtualize

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-29062High-severity vulnerability resolved by updating to jackson-core 3.1.2
    CVE-2026-33701Critical vulnerability resolved by updating opentelemetry to 2.28.1
    CVE-2026-35568High-severity vulnerability resolved by updating to mcp-core 1.1.3
    CVE-2026-39304
    CVE-2026-40466
    CVE-2026-41044
    CVE-2026-45505
    High-severity vulnerabilities resolved by updating activemq to 5.19.7
    CVE-2026-41293
    CVE-2026-43515
    Critical vulnerability resolved by updating tomcat to 10.1.55
    CVE-2026-41838
    CVE-2026-41842
    CVE-2026-41848
    CVE-2026-41850
    CVE-2026-41851
    High-severity vulnerabilities resolved by updating spring framework to 6.2.19
    CVE-2026-42402
    CVE-2026-42403
    CVE-2026-42404
    High-severity vulnerabilities resolved by updating neethi to 3.2.2
    CVE-2026-44930Critical vulnerability resolved by updating CXF to 4.1.7
    SOA-19368Data source variables no longer resolve when they are used inside another column from the same data source.

    CTP

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-22732Critical vulnerability resolved by updating to spring-security-core version 6.5.9
    CVE-2026-22737High-severity vulnerability resolved by updating to spring-core version 6.2.17
    CVE-2026-33937Critical vulnerability resolved by updating to handlebars.js version 4.7.9

    Updates in 2025.3.4

    SOAtest and Virtualize

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-9563High-severity vulnerability by updating parsson to 1.1.9
    CVE-2026-53917
    CVE-2026-50734
    High-severity vulnerabilities by updating activemq to 5.19.8
    CVE-2026-54512
    CVE-2026-54513
    High-severity vulnerabilities by updating jackson-databind to 2.21.4
    CVE-2026-55276
    CVE-2026-53434
    CVE-2026-59083
    CVE-2026-59084
    Critical vulnerabilities resolved by updating tomcat to 10.1.57
    VIRT-8474SOAVirt REST API - Progressive performance decreases over time when creating extensionTools

    CTP

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-33701Critical vulnerability resolved by updating opentelemetry to 2.28.1
    CVE-2026-39304
    CVE-2026-40466
    CVE-2026-41044
    CVE-2026-45505
    High-severity vulnerabilities resolved by updating activemq to 6.2.6
    CVE-2026-41838
    CVE-2026-41842
    CVE-2026-41848
    CVE-2026-41850
    CVE-2026-41851
    High-severity vulnerabilities resolved by updating spring framework to 6.2.19
    CVE-2026-42402
    CVE-2026-42403
    CVE-2026-42404
    High-severity vulnerabilities resolved by updating neethi to 3.2.2
    CVE-2026-44930Critical vulnerability resolved by updating CXF to 4.1.6
    CVE-2026-4800Critical vulnerability resolved by updating lodash to 4.18.1
    SOA-19415java.lang.NoClassDefFoundError: javax/xml/ws/http/HTTPException

    Updates in 2025.3.5

    SOAtest and Virtualize

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-8763
    CVE-2026-58062
    Critical vulnerabilities resolved by updating bc-fips to 2.1.3
    CVE-2026-54225
    CVE-2026-64958
    CVE-2026-65432
    High-severity vulnerabilities resolved by updating CXF to 4.1.8
    CVE-2026-59878High-severity vulnerability resolved by updating activemq to 5.19.9
    CVE-2026-66142
    CVE-2026-66143
    CVE-2026-66144
    High-severity vulnerabilities resolved by updating neethi to 3.2.3

    CTP

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-9563High-severity vulnerability by updating parsson to 1.1.9
    CVE-2026-53917
    CVE-2026-50734
    High-severity vulnerabilities by updating activemq to 6.2.7
    CVE-2026-54399
    CVE-2026-54428
    High-severity vulnerabilities by updating httpcore to 5.4.3
    CVE-2026-54512
    CVE-2026-54513
    High-severity vulnerabilities by updating jackson-databind to 2.21.4

    Updates in 2025.3.6

    CTP

    Resolved FRs and PRs

    Scroll Table Layout
    sortDirectionASC
    repeatTableHeadersdefault
    widths30%,70%
    sortByColumn1
    sortEnabledfalse
    cellHighlightingtrue

    IDDescription
    CVE-2026-8763
    CVE-2026-58062
    Critical vulnerabilities resolved by updating bc-fips to 2.1.3
    CVE-2026-54225
    CVE-2026-64958
    CVE-2026-65432
    High-severity vulnerabilities resolved by updating CXF to 4.1.8
    CVE-2026-59878High-severity vulnerability resolved by updating activemq-client 6.2.8
    CVE-2026-66142
    CVE-2026-66143
    CVE-2026-66144
    High-severity vulnerabilities resolved by updating neethi to 3.2.3