Upcoming Single-Tenant Version | 3.48

AST-114426

In the Query Editor, result tabs were displayed out of order after more than nine query runs.

AST-113659

Failed to create a query in Web Audit.

AST-109939

The Analytics > Vulnerabilities by State view opened with an incorrect page count.

AST-109456

HTML tags appeared in the DAST report.

AST-112961

A SAML authentication error occurred with the message “Unexpected error when authenticating with identity provider.”

AST-111567

The manage-access permission did not allow adding or removing users via the authorization tab.

AST-110552

The GET /{realm}/groups Keycloak API returned a 500 error when the realm contained more than 2000 groups.

AST-115744

DAST CLI Scans failed with “Exit Status 2”.

AST-113476

SAST policy exceptions failed with an error.

AST-112537

The Data Origins widget in Global Inventory was missing origin testing.

AST-112227

The Project Overview and Scan History sections showed zero results.

AST-111589

The Cluster Name column was duplicated in Cloud Insights CSV exports.

AST-109213

The Add User to Group dialog displayed empty First and Last Name columns.

AST-109200

The Select Group button disappeared from the identity provider mapper.

AST-108405

The Authentication Recorder failed on Cx1 but worked on ZAP.

AST-106143

In the new IAM UI, the Add Managers to Group function did not allow managing groups or users.

AST-113049

The Webhooks API endpoint experienced performance issues.

AST-109903

KICS returned a false negative for unrestricted Security Group ingress.

AST-109902

KICS returned a false negative for Security Groups with unrestricted SSH access.

AST-109901

KICS returned a false positive for generic passwords and secrets.

AST-109542

KICS returned a false negative for sensitive ports exposed to the entire network.

AST-109541

KICS returned a false negative for open Remote Desktop ports in Terraform.

AST-82493

KICS displayed incorrect project and scan counters and summaries.

AST-45594

IAC security scans failed due to an engine ETL error.

AST-44724

Duplicated SimilarityIDs caused issues in engine ETL processing.

AST-88062

Outdated Packages on the Scanners page did not match the scan results.

AST-110337

Project reports displayed “Not exploitable” SCA vulnerabilities incorrectly.

SCA-23863

Errors occurred in the SCA packages processor.

SCA-24304

The presigned AWS token URL used for export expired prematurely.

SCA-24029

Binary packages were not detected in some scans.

SCA-24018

The Projects service did not correctly handle LastSuccessfulScanId.

SCA-24017

Python pip installs caused resource exhaustion in the Source Resolver.

SCA-23995

Errors occurred when changing the package state to “Monitored.”

SCA-23976

The package state could not be changed when viewing results via the Application Risk Management tab (SCA).

SCA-23861

The default SCA PDF report displayed incorrect data.

SCA-23804

Scans failed with the error “Scan failed due to internal error.”

SCA-23846

The Global Inventory GraphQL API returned 504 errors.

SCA-24272

Global Inventory returned zero results due to OIDC authentication issues.

SCA-24028

Tag filters did not work in Global Inventory and Risks views.

SCA-23777

The Export Service failed when exporting results for specific scans.

SCA-23677

Some packages incorrectly indicated that no secure version was available.

SCA-23640

Package usage was not detected correctly.

AST-119223

Uploading YAML configurations to API Scans failed.

AST-116208

Configuring the Code Repository in project settings got stuck for certain projects.

AST-113866

The Assign Tags dropdown did not work under Access Management Phase 1.

AST-113813

Group assignment during project creation did not work when Access Management Phase 1 was enabled.

AST-113481

The API endpoint GET /api/projects returned null for projects without groups.

AST-112222

Setting incremental scan caused an exception in the log.

AST-112071

Integration with self-hosted SCM via CxLink displayed an incorrect error message.

AST-110745

Searching for a branch to scan returned: Branch not found.

AST-110436

Azure DevOps integration truncated the last character when it was a parenthesis in an optional field.

AST-109098

The PATCH /api/applications endpoint did not allow changing the application name back to its original name.

AST-108808

Setting a primary branch in projects associated with inaccessible applications failed under Access Management Phase 1.

AST-107278

Automatic assignment of SCM projects to applications via tag association did not work as expected.

AST-117026

The Groups page in IAM displayed only ten subgroups.

AST-117004

Each load of the DAST Environment tab generated a new API key.

AST-116190

Grouping by path in DAST results broke the UI when the path was very long.

AST-117961

The frontend displayed an endless loader when repository information was missing, with no option to refresh.

SCA-24193

SBOM-only scans failed to execute.

SCA-24109

The Downstream Remediation status remained “scanning” after the scan finished.

SCA-23891

The package com.atlassian.util.concurrent was not detected by SCA.

SCA-23804

Scans failed with the error: Scan failed due to internal error. Please contact support and provide the Scan ID.

SCA-24337

State updates were ignored due to case-sensitive package names.

AST-116201

The project conversion process logged information improperly.

AST-111421

Loading vulnerabilities in Analytics and Dashboard was slow on specific tenants.

AST-113506

The KICS query for “SQL Server Ingress From Any IP” required an update.

AST-116793

Changing IaC predicates failed when the username exceeded 50 characters.

AST-116787

IaC results did not include the stateID field.

AST-111591

IaC generated a runtime panic error due to “index out of range [4] with length 4.”

AST-116113

Assigning a project to an application failed when the Application page was opened in a new tab.

AST-115875

A project in the database remained stuck and required manual deletion.

AST-113695

Running scans for public repositories in manual projects required a token.

AST-115388

The project conversion process remained stuck for 24 hours.

AST-111113

Swagger authorization failed for tenants with names shorter than three characters.

AST-83025

Scan details were not reflected on the Projects page.

AST-113375

Project group filtering did not work for users under Access Management Phase 1.

AST-110660

The filter status for api/results returned incorrect results for Container scans.

AST-113656

ZAP produced excessive duplicate alerts for passive scan rules in DAST

AST-84342

The SAST migration process caused service crashes with a Redis error.

AST-110019

The Service User account was missing the ast-admin permission.