(Note: you can download the Release Notes PDF in the Release Notes PDFs section in Help Center)

For this release, we anticipate the following introductions in your environments. Major features are documented in the Blend Knowledge Base accessible at help.blend.com. If that resource does not answer your question, please reach out to Blend Support.

Announcements (2)

(New) SAML Key Encryption Update Required

We are deprecating support for RSA 1.5 (RSA_PKCS1_PADDING) key encryption for SAML assertions, which will be fully removed by October 1st, 2026. This change is driven by a Node.js 22+ security fix for the Marvin Attack vulnerability (CVE-2023-46809), which removes support for RSA 1.5 padding in the decryption path, meaning any SAML assertions still using this method will fail to decrypt. IdP administrators must update their SAML key encryption method from RSA 1.5 to RSA-OAEP (xmlenc#rsa-oaep-mgf1p) in their Identity Provider's SAML integration or Service Provider (SP) connection settings by October to avoid disruption to borrower SAML-based authentication. This update is typically carried out by your institution's IT team. If you have questions or need assistance, please reach out to your Blend representative or open a support ticket.

Note: Update steps may vary depending on your IdP (e.g., Okta, Azure AD, PingFederate, OneLogin, etc.). Refer to your IdP's documentation or contact their support team for specific instructions.

Encompass Lower Environment Migration

ICE is in the process of migrating customers’ Encompass lower environments over a period of time. If you are scheduled for migration, please be aware of the following important steps to ensure continued connectivity with Blend:

What You Need to Do:

Notify Blend Support at least 10 days in advance of your scheduled migration. This lead time is necessary for Blend to prepare and reestablish connectivity between your Encompass Beta and Blend Beta environments.

If you have received a migration notification from ICE and do not intend to delay the migration, please notify Blend Support immediately to ensure your systems remain connected.

For additional details, please refer to ICE's official documentation here:

R2T to UAT Migration Details

Maintenance Announcements (1)

(New) Configurable Platform Database Upgrade

Blend will be upgrading our Configurable Platform database to version 15.10.

Will there be downtime associated with this maintenance?

Yes, the downtime will impact features and services in both the borrower and lender app.

What services or products are affected?

Configurable Platform functionality in prod may be temporarily unavailable. During the upgrade, users may experience brief errors or timeouts as the system restarts and transitions to the upgraded environment.

How will this impact the borrower app?

Borrowers may experience intermittent issues with loading, saving, or submitting data.

How will this impact the lender app?

Lenders may experience intermittent issues with loading, saving, or submitting data.

Upgrade Phases

This upgrade will be completed in two phases (minor and major) on separate dates. Both phases are expected to have similar, brief impact during their respective maintenance windows.

Maintenance Windows

• Beta: This update will not impact beta environments.

• Production - minor upgrade: Wednesday 5/20, 12:00 AM – 2:00 AM Pacific (approximately 5 minutes)

• Production - major upgrade: Friday 5/22, 12:00 AM – 2:00 AM Pacific (approximately 5 minutes)

Preview Environments (Test/Dev/Beta) (1)

• Custom Pipeline Views

Production Environments (Prod) (6)

• Third-Party Fees Stale Data Warning
• Suffix Field Dropdown
• Permissions-Policy HTTP Header
• Home Equity - Remove Blank Screen at Lender Submit
• Blend Public API v12 Release
• Expose Borrower SMS Consent in MISMO and APIs

0 Votes