Bug Fixes
- IAST: fix potentially empty ranges after executing the decode aspect.
- CI Visibility: fixes an issue where git author or committer names containing commas (eg: "Lastname, Firstname") would not work (and log an error) due to the use of comma as a separator.
- CI Visibility: fixes issues with pytest~=8.0 that would case crashes in certain scenarios, and returned different module names
- CI Visibility: fix a potential crash for Python<3.10 when a socket.timeout error was raised instead of the expected TimeoutError during CI Visibility API requests
- profiling: fixes an issue that could have caused the profiler to stop if unable to determine the class name of a profiled function with CPython 3.11 and newer.
- ASM: This fix resolves an issue where remote config update in WAF policy from block attack tools policy to monitoring only policy could be ignored by tracer.
- Vulnerability Management for Code-level (IAST): Fixes an issue where requests stopped being analyzed after some time due.
- Vulnerability Management for Code-level (IAST): This fix addresses an issue where AST patching would generate code that fails to compile, thereby preventing the application from starting correctly.
- Vulnerability Management for Code-level (IAST): This fix addresses AST patching issues where other subscript operations than
Load
were being unintentionally patched, leading to compilation errors for the patched module. - Vulnerability Management for Code-level (IAST): Fixes an issue where an atexit handler could lead to a segmentation fault.
- Vulnerability Management for Code-level (IAST): This fix addresses an issue where a vulnerability would be reported at line 0 if we couldn't extract the proper line number, whereas the default line number should be -1.
- kafka: This fix resolves an issue where the use of a Kafka
DeserializingConsumer
could result in a crash when the deserializer in use returns a type without a__len__
attribute.