gitlab-org/security-products/dast v2.27.0

on GitLab

Changes

• Upgrade Browserker to version 0.0.76 (!597)
  • Upgrade vulnerability checks to version 1.0.17 browserker!602
    • Checks 16.2, 16.3, 16.4, 16.5, and 16.6 use a named matcher for report uniqueness dast-cwe-checks!104
  • Fix bug in response handling of cached headers browserker!599
  • Upgrade GCD to version 2.2.5 browserker!606
  • Enable 359.1 passive check browserker!590
  • Sort headers in vulnerabilities evidence to encourage deterministic results browserker!610
  • User can print orphan DevTools event summary when LogRequestErrorReport is turned on browserker!605
  • Fix error where building HTTP messages from resources prints a warning when DevTools events are not present browserker!611
  • Enable 359.2 passive check browserker!609
  • Fix 829.1 passive check to only match link tags with the rel attribute of stylesheet and script browserker!604
• Replace ZAP rule 10062 with 359.1 and 359.2 in browser based scan (!586)

Docker Images

• registry.gitlab.com/security-products/dast:2.27.0