(J)Wt 4.11.2 is a bigger patch release that fixes a couple of issues, and also introduces some improvements. Check the release notes for more info.
The main points of attention are:
allowing developers to provide custom headers! The configuration is now allowed to set headers you always wish to send to clients. This can be used to improve security.
make the (CSP) usable, and configurable. This can be done with the above, or simply by allowing (script nonces), see use-script-nonce
quite a few improvements on the JavaScript side.
Here are the links:
Wt 4.11.2 (C++): download wt-4.11.2.tar.gz (release notes)
JWt 4.11.2 (Java): download jwt-4.11.2.zip (release notes)
Binary builds for Windows are available on the GitHub releases page.