Latest Release Notes

SoapUI Open Source 5.10.0

Released June 2, 2026

Updates

Updated Help menu — Removed outdated menu entries (API Testing Dojo, Search Forum) and corrected links for Getting Started and Privacy Policy.
Updated landing page — New welcome content celebrating 20 years of SoapUI with a link to the community story thread.

Security fixes

This release addresses multiple known security vulnerabilities by updating the following third-party libraries:

slf4j & log4j — Updated to resolve CVE-2018-8088 and CVE-2025-68161.
htmlunit — Updated from 2.7 to resolve CVE-2023-26119.
xstream — Updated from 1.4.13 to resolve multiple CVEs. (Full list)
swagger-inflector v1 — Updated to address CVE-2025-48976 and CVE-2023-24998 (via commons-fileupload dependency).
dom4j — Updated from 1.6.1 to resolve CVE-2020-10683.

Bug fixes

Fixed layout issues in the “New Version Check” window — Buttons are no longer clipped or partially hidden.

Internal improvements

macOS installer migrated to single bundle archive — The macOS installer type has been updated as part of the Install4j 11 migration, improving compatibility with modern macOS versions.
Disabled Mixpanel analytics — Mixpanel usage tracking has been removed and related code refactored.

SoapUI Open Source 5.9.0

Released 16th July 2025

Merged a community PR. Fixing the content-type check for XML.

SoapUI Open Source 5.8.0

Released 18 December 2024

Updated the Opt-in to Stay Tuned invite
Added AES256 project encryption support
Updated Java to v17.0.12
Updated JavaFX to v17.0.12
Upgrade Groovy to 3.0.8
Update com.graphql-java:graphql-java in SoapUI to 17.4.0
MacOS (ARM 64 bit) installer available with 5.8.0
Made some styling updates to Endpoint Explorer after upgrade to Java 17

SoapUI Open Source 5.7.2

Released 7th November 2023

Fixed bugs

Fixed a vulnerability related to ZipSlip attack (Path Traversal) and made some updates by removing references to previous State of Software Quality API surveys.

SoapUI Open Source 5.7.1

Released 1st August 2023

Fixed bugs

Fixed an issue where SoapUI version 5.6.0 and 5.7.0 would not install or open on certain machines including Mac OS Ventura. There were issues with an expired Apple Certificate and previous bundled JRE environment. We have signed the new version with updated Apple Certificate and also updated the bundled JRE environment to Liberica version 16.0.2+7. These updates which resolves this issue for Mac users and the application now installs properly. Windows and Linux versions also received updates to the bundled JRE environment.

SoapUI Open Source 5.7.0

Released 12th January 2021

The new release includes support for GraphQL APIs and offers other improvements that make API testing more convenient and powerful.

GraphQL Support

Now you can test GraphQL services. To do this, use the new GraphQL Request test step. To learn more, see GraphQL Testing.

Docker support

SmartBear introduces a pre-configured Docker image, so now you can run SoapUI functional tests in isolated Docker containers.

Built-in OpenAPI (Swagger) support

Now, to work with OpenAPI/Swagger definitions, you do not need to use plugins. SoapUI supports it out-of-the-box. Additionally, we’ve improved integrations with SwaggerHub to make it even more convenient.

Overall improvements

Support for OpenJDK 16.
Now, SoapUI opens a response editor that matches the response content type. For example, it opens JSON editor if response has JSON content.
We’ve updated a number of third-party libraries, including the following:
- Apache Log4j library to 2.17.1.
- Jayway jsonpath to 2.4.0.
Now, SoapUI Open Source stores log files to the /.soapuios/logs directory. Previously, they were stored in the SoapUI installation directory, which could cause issues on Windows computers.
A new feature by modax: Now, you can run SoapUI Open Source build from the Travis-CI.

Fixed bugs

When proxy is set to None, usage of the ProxySelector class leads to the NullPointerException.
The value of the Start Step property of the SOAP Mock Response could reset to the default value in some cases.
A bug fix by stevendjames: When you used Query/Match filter in the SOAP Mock Response test step, the ClassCastException could occur.
A bug fix by MagnoCorrea: Names of the exported WSDL definitions with schema references could be too long. Now, such names are shorter and easier to work with.
A bug fix by stevann7: REST mock services did not show details of the message when you double-click it in the Message Log panel.
A bug fix by modax: In some cases, when you assigned a new endpoint to requests with the specific endpoint in the Service Endpoints panel, SoapUI did not apply it.
A bug fix by clynton: The NullPointerException could occur if you did not add the runBeforeSteps event listener to the project.