Current Single-Tenant Version | 3.50

AST-120770

Establishing a connection failed after multiple attempts.

AST-120359

Authentication to certain web applications in DAST failed.

AST-119984

Establishing a connection did not work as expected.

AST-119074

Generic API Key (ClientSecret) produced false negatives.

AST-118991

Generic API Key (SecretKey) produced false negatives.

AST-118979

Authentication to public web applications in DAST failed.

AST-117177

SAST results were missing descriptions.

AST-116382

Predefined Azure role identifiers (RBAC) were incorrectly flagged as secrets.

AST-115570

Generic API Key produced false positives.

AST-120044

The “Download Logs” option did not appear for specific tenants.

AST-119647

Authentication to additional public web applications in DAST failed.

AST-118856

DAST vulnerability reports contained duplicate compliance data.

AST-118034

Constant error messages appeared in the UI even though scans completed successfully.

AST-117997

Certain users were unable to tag scans.

AST-117993

Projects could not be deleted.

AST-116320

Generating DAST scan reports failed when scans contained a large number of vulnerabilities.

AST-116212

SAST worker failed to read results due to an XML parsing error.

AST-108655

The UI displayed an unclear message when the primary branch was not set.

AST-98430

SAST worker failed to read scan status due to a deserialization error (EOF).

AST-114083

Changing the preset setting at the project level was not possible.

AST-114444

GitLab projects did not convert via API, though creation and updates worked through the UI with the same credentials.

AST-123607

Fixed vulnerabilities by severity displayed today’s date in the Detected First and Detected Last fields.

AST-122322

DAST provided an incorrect secret key during two-factor authentication..

AST-122103

Grouping by path in DAST results broke the UI when the path was very long.

AST-120573

The Containers Realtime API did not recognize confluentinc/cp-kafkacat:6.1.10 as malicious.

AST-118573

Container scans reported remediation images as vulnerable.

AST-116707

Confirming a malicious package flagged in a container was not possible.

AST-116035

Critical vulnerabilities were reported in gcr.io/distroless/base-debian12:latest even though they were not present.

AST-115617

The Source Extractor channel in FIS shut down unexpectedly.

AST-115463

The Container Security GraphQL API returned incorrect counters.rs.

AST-114094

The Container Security GraphQL API did not function properly.

AST-114081

CSV SAST Results reports did not display the full vulnerability URL.

AST-114049

In Analytics, the “Vulnerabilities by State” drill-down data did not match the CSV report.

AST-108903

Container scans failed from CLI version 2.3.21 onward.

AST-107697

Container image scans failed and returned an error.

AST-105819

The Scan History page displayed zero results and showed a “Failed to get Containers summaries” message.

AST-101532

Input validation for AWS ECR integration in Container Security was not working correctly.

AST-100434

Container scans failed due to a timeout error (System.TimeoutException: Max scan timeout reached).

AST-96382

Scanning containers via CLI and UI produced inconsistent results.

SCA-24730

The feature flag SCA_DISABLE_GRAPHQL_FOR_SCAN_REPORT changed the FirstFoundAt format in reports.

SCA-24666

The Scan Runner marked scans as failed even after successful retries.

SCA-24644

NuGet sources were removed unexpectedly.

SCA-24469

The commons-httpclient package was not found by fingerprint detection.

SCA-24445

Some packages did not appear in the UI.

SCA-24417

Incorrect version and dependency details were shown for org.apache.derby:derbyshared.

SCA-24408

The SCA Resolver scanned the node_modules folder despite exclusion rules.

SCA-24362

SCA scans failed after JFrog integration.

AST-122242

DAST was missing a record for the “Login” button click event.

AST-120822

Pull Request comments showed unclear messaging when attempting to connect to an LLM, even when the feature was not licensed.

AST-120766

The SAST worker encountered failures that required RCA analysis.

AST-116925

The PUT method returned HTTP 500 on the release candidate under Access Management.

AST-115620

Terraform Plan files did not return results in IaC.

AST-115005

Setting the primary branch in project settings failed.

AST-114868

IaC generated a false positive for “SNS Topic is Publicly Accessible.”

AST-114807

Branches containing special characters did not appear in Scan History.

AST-111151

Filtering the scan queue took longer than 15 seconds.

AST-109896

Filter performance on certain project pages was slow.

AST-105352

IaC results returned outdated severity information.

AST-121115

Application reports generated empty lists of applications and scanners.

AST-120024

Authorization was granted to an incorrect group name under Access Management Phase 1.

AST-120549

Internal server errors (500) occurred for OAuth clients with the manage-access permission.

AST-119795

Reset password events appeared as user.mfa.updated in the Audit Trail.

AST-118003

Adding groups during project creation did not work properly when subgroups were involved.

AST-114556

Users could not log in via SAML or SSO in the DEU environment.

AST-120097

A Keycloak issue occurred during the Import Tool run in IAM.