Addendum to Apigee release notes dated August 27, 2026 (1-18-0-apigee-4).

Fixed in this release

Bug ID Description 565072374 Fixed an issue where VerifyJWT policies using a JWKS uriRef could return steps.jwt.NoMatchingPublicKey on the first request after the 5-minute JWKS cache TTL expired when the identity provider rotated keys.

Bug ID · Description

Bug ID Description N/A Security fixes for apigee-asm-ingress. This addresses the following vulnerabilities: CVE-2026-33818