Upcoming Single-Tenant Version | 3.40

AST-94081

A null pointer exception occurred during the creation of the Jira issue.

AST-93503

An exception was thrown in the new policy management section of the PR decoration flow.

AST-92700

Manual scan cancel operations were failing.

AST-90711

The api/scan GET endpoint sporadically returned 504 Gateway Timeout errors.

AST-90688

The project/branches API returned duplicated branches.

AST-89575

PR comments were not created on Azure DevOps.

AST-86427

The Application Risk Management page failed to display results.

AST-90902

API secrets were missing in.PLIST files (Secret Detection - [2MS]).

SCA-22913

The license list was null instead of an empty list.

SCA-22893

The AI Package Finder did not work when using Python.

SCA-22657

There was a mismatch between the ScanReport SCA UI and the API regarding ProjectsTags.

SCA-22459

gRPC errors occurred in processors.

SCA-22303

The Dev/Test filter did not remove transitive risks that had no vulnerable package path.

AST-94924

The GET /api/results endpoint returned 504 Gateway Timeout errors.

AST-93294

Branches could not be fetched using an Azure SSH URL in a manual project.

AST-93281

The cache had to be cleared after deploying a new version.

AST-92725

A false negative occurred in KICS for an S3 bucket that allowed delete actions from all principals.

AST-92676

The IDP Initiated flow URI did not work in the new AIM UI (regression).

AST-91509

The Severity Over Time graph in the project overview did not accurately track vulnerability history.

AST-91156

The new IAM UI did not show group paths longer than 50 characters under the user → edit group section.

AST-89465

Scans did not work in Checkmarx One but worked via CLI.

AST-85982

The small scan button triggered an incorrect link, preventing scan initiation.

AST-85127

The ast_sast_scan_summary required updates due to multiple issues, including summary duplicates, summaries of deleted scans, and summaries with Null in counters.

AST-84173

The GET /api/projects API returned inconsistent data.

AST-73710

The documentation for the Organization Data section in Account Settings needed updating.

AST-98668

Retrieving usernames from Bitbucket tokens caused exceptions.

AST-97122

Parent search errors occurred while configuring Jira applications.

AST-95425

The API for project conversion failed for some organizations.

AST-95419

The POST /api/data_analytics/analyticsAPI/v1 endpoint threw exceptions when called without a body.

AST-95308

Double-encoded organization names with spaces caused integration flow errors.

AST-95093

PR decoration URLs were generated incorrectly for Azure.

AST-93965

Scans intermittently remained stuck in the "Running" state.

AST-92515

Analytics dashboard showed result state mismatches.

AST-90975

Generated PDF reports duplicated the latest scan ID and LOC across branches.

AST-89541

AWS Linux package versions were not parsed correctly.

AST-86609

Scans failed on the blazemeter/taurus:latest container image.

AST-84657

The CS scanner failed to detect vulnerable old Alpine images.

AST-79074

Vulnerability counts differed between the Summary and Overview pages.

SCA-23056

Bulk updates of SCA vulnerability risk states did not work as expected.

SCA-23055

Bring Your Own Key (BYOE) functionality failed for SCA.

SCA-23020

Scan times were too long.

SCA-22302

Report generation failed for specific scans.

AST-96914

The remote backend was unreachable.

AST-96688

Critical severity appeared unexpectedly in the UI.

AST-96534

Onboarding failed.

AST-95864

The /api/results filter with EXCLUDE_NOT_EXPLOITABLE did not work.

AST-93625

The Application Risk Management page showed "No Risks" on first access.

AST-93304

In VSCode, proxy-only users could not enable the scan button.

AST-89866

Scans intermittently returned 500 errors.

AST-89265

The CxIAM page failed to load.

AST-78569

SCM integrations did not display all groups or allow group search.

AST-64244

Scan results differed between the ZAP UI and Checkmarx One.

AST-94943

The Settings page showed duplicate IaC presets.

AST-74900

The IAM "Friendly Name" attribute in SAML mappers behaved inconsistently.

AST-94951

The SAML Identity Provider failed to set the Principal Attribute.

AST-94573

The Save button in IAM General Settings was disabled for some tenants.

AST-92091

The IAM "Groups, Filters and Dependencies" view showed data without enabling actions.

AST-89908

OAuth client edits were not saved in the new IAM UI.

AST-89783

Duplicate Identity Providers could be created in the new IAM UI.

AST-89726

The Endpoints link was removed from the SAML config page in the new IAM UI.

AST-88486

Fixed an issue preventing project deletion when an active session exists.

AST-92842

Fixed a false negative in KICS for "S3 bucket allows public policy."

AST-92725

Fixed a false negative in KICS for "S3 bucket allows delete action from all principals."

SCA-23218

Resolved SBOM scan failure caused by Dart package.

SCA-23136

Corrected issue where an "unknown" package was incorrectly labeled.

SCA-23121

Fixed license URL pointing to the wrong license.

SCA-23093

Fixed license URL pointing to the wrong license.

SCA-23046

Resolved timeouts when handling GraphQL requests.

SCA-23033

Fixed issue where the usage filter was not functioning properly.

SCA-22991

Addressed failures in SCA scans.

AST-98506

Fixed issue where 'API-Security Only' scan requests were running only SAST.

AST-92441

Updated documentation for flows affected by non-production branch data restrictions.

AST-92131

Fixed issue where the job spider failed to access URLs due to insufficient_security(71).

AST-91177

Resolved regression where the Select Role button was missing in the new AIM UI for SAML Attribute to Role mapping.

AST-96683

Fixed issue where container reports failed to generate in PDF format.

AST-92445

Resolved issue where empty reports were generated without notifying users when no production branch was present.

AST-95602

Fixed intermittent errors occurring during SCS scans.

AST-96103

Resolved scan failure caused by Git submodule name mismatch.

AST-94413

Fixed issue where private bots were not being filtered correctly.

AST-93062

Corrected contributor developer count showing 0 in license usage.

AST-98824

Projects count changes were not reflected on the Projects List page.

AST-96695

Some UI elements of "Analytics & Dashboard" were incorrectly translated into Traditional Chinese.

AST-98662

After upgrading to IAM version 3.35.1, IDP-initiated SSO no longer functioned in single-tenant environments.

AST-95720

The API endpoint for retrieving users returned groups parameter as null.

AST-94354

CxIAM | New AIM UI: User appeared with an empty username and couldn’t be deleted.

AST-92552

CxIAM | OAuth client tooltip was not showing the expiration date.