> For the complete documentation index, see [llms.txt](https://docs.mydbsync.com/cloud-replication-main/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.mydbsync.com/cloud-replication-main/release-notes/release-9.7.4.md).

# Release 9.7.4

#### Bug

[DR-3259](https://dbsync.atlassian.net/browse/DR-3259) Tomcat upgrade to latest version 9.0.117

[DR-2866](https://dbsync.atlassian.net/browse/DR-2866) Default time shows 16h 18m 26s

[DR-3116](https://dbsync.atlassian.net/browse/DR-3116) VAPT Remarks/Observations 2026

[DR-3196](https://dbsync.atlassian.net/browse/DR-3196) WebAPI auth based URL access not working

[DR-3203](https://dbsync.atlassian.net/browse/DR-3203) VAPT Remark - 1. Sensitive Information Disclosure:High - CR-2326

[DR-3204](https://dbsync.atlassian.net/browse/DR-3204) VAPT Remark - 2. Publicly Accessible Swagger API : High - CR-2326

[DR-3205](https://dbsync.atlassian.net/browse/DR-3205) VAPT Remark - 3. Improper Input Validation: High - CR-2326

[DR-3206](https://dbsync.atlassian.net/browse/DR-3206) VAPT Remark - 4. Lack of Rate-Limiting: High - CR-2326

[DR-3208](https://dbsync.atlassian.net/browse/DR-3208) VAPT Remark - 6. Concurrent Login Allowed : Low- CR-2326

[DR-3214](https://dbsync.atlassian.net/browse/DR-3214) readStartDocument can only be called when CurrentBSONType is DOCUMENT, not when CurrentBSONType is END\_OF\_DOCUMENT.

[DR-3216](https://dbsync.atlassian.net/browse/DR-3216) DB Replicate: CSV & Parquet files are not getting downloaded when the target is MinIO