Release Notes: ProcessMaker 3.9.10

Release Date: July 8th, 2026

This document contains release notes for ProcessMaker 3.9.10. Release Notes are cumulative, and document improvements associated with this release unless otherwise noted. A list of older ProcessMaker Release Notes is included at the end of this document.

Improvements

ProcessMaker 3.9.10 includes the following improvement:

1. Session and application cookies now enforce more secure default settings, including SameSite and HttpOnly attributes. This enhancement helps protect against common web security risks such as CSRF and XSS attacks and aligns cookie handling with security best practices.

Previous Release Notes

Refer to the previous Release Notes from ProcessMaker versions 3.2 through 3.9.9:

• 3.9.9
• 3.9.8
• 3.9.6
• 3.9.5
• 3.9.4
• 3.9.3
• 3.9.2
• 3.9.1
• 3.9.0
• 3.8.3
• 3.8.2
• 3.8.1
• 3.8.0
• 3.7.7
• 3.7.6
• 3.7.5
• 3.7.4
• 3.7.3
• 3.7.2
• 3.7.1
• 3.7.0
• 3.6.5
• 3.6.4
• 3.6.3
• 3.6.2
• 3.6.1
• 3.6.0
• 3.5.11
• 3.5.10
• 3.5.9
• 3.5.8
• 3.5.7
• 3.5.6
• 3.5.5
• 3.5.4
• 3.5.3
• 3.5.2
• 3.5.1
• 3.5.0
• 3.4.11
• 3.4.10
• 3.4.9
• 3.4.8
• 3.4.7
• 3.4.6
• 3.4.5
• 3.4.4
• 3.4.3
• 3.4.2
• 3.4.0
• 3.3.17
• 3.3.16
• 3.3.15
• 3.3.14
• 3.3.13
• 3.3.12
• 3.3.11
• 3.3.10
• 3.3.9
• 3.3.8
• 3.3.7
• 3.3.6
• 3.3.5
• 3.3.4
• 3.3.3
• 3.3.2
• 3.3.1
• 3.3.0
• 3.2.4
• 3.2.3
• 3.2.2
• 3.2.1
• 3.2