Current Multi-Tenant Version | 3.39

AST-94081

A null pointer exception occurred during the creation of the Jira issue.

AST-93503

An exception was thrown in the new policy management section of the PR decoration flow.

AST-92700

Manual scan cancel operations were failing.

AST-90711

The api/scan GET endpoint sporadically returned 504 Gateway Timeout errors.

AST-90688

The project/branches API returned duplicated branches.

AST-89575

PR comments were not created on Azure DevOps.

AST-86427

The Application Risk Management page failed to display results.

AST-90902

API secrets were missing in.PLIST files (Secret Detection - [2MS]).

SCA-22913

The license list was null instead of an empty list.

SCA-22893

The AI Package Finder did not work when using Python.

SCA-22657

There was a mismatch between the ScanReport SCA UI and the API regarding ProjectsTags.

SCA-22459

gRPC errors occurred in processors.

SCA-22303

The Dev/Test filter did not remove transitive risks that had no vulnerable package path.

AST-94924

The GET /api/results endpoint returned 504 Gateway Timeout errors.

AST-93294

Branches could not be fetched using an Azure SSH URL in a manual project.

AST-93281

The cache had to be cleared after deploying a new version.

AST-92725

A false negative occurred in KICS for an S3 bucket that allowed delete actions from all principals.

AST-92676

The IDP Initiated flow URI did not work in the new AIM UI (regression).

AST-91509

The Severity Over Time graph in the project overview did not accurately track vulnerability history.

AST-91156

The new IAM UI did not show group paths longer than 50 characters under the user → edit group section.

AST-89465

Scans did not work in Checkmarx One but worked via CLI.

AST-85982

The small scan button triggered an incorrect link, preventing scan initiation.

AST-85127

The ast_sast_scan_summary required updates due to multiple issues, including summary duplicates, summaries of deleted scans, and summaries with Null in counters.

AST-84173

The GET /api/projects API returned inconsistent data.

AST-73710

The documentation for the Organization Data section in Account Settings needed updating.

AST-98668

Retrieving usernames from Bitbucket tokens caused exceptions.

AST-97122

Parent search errors occurred while configuring Jira applications.

AST-95425

The API for project conversion failed for some organizations.

AST-95419

The POST /api/data_analytics/analyticsAPI/v1 endpoint threw exceptions when called without a body.

AST-95308

Double-encoded organization names with spaces caused integration flow errors.

AST-95093

PR decoration URLs were generated incorrectly for Azure.

AST-93965

Scans intermittently remained stuck in the "Running" state.

AST-92515

Analytics dashboard showed result state mismatches.

AST-90975

Generated PDF reports duplicated the latest scan ID and LOC across branches.

AST-89541

AWS Linux package versions were not parsed correctly.

AST-86609

Scans failed on the blazemeter/taurus:latest container image.

AST-84657

The CS scanner failed to detect vulnerable old Alpine images.

AST-79074

Vulnerability counts differed between the Summary and Overview pages.

SCA-23056

Bulk updates of SCA vulnerability risk states did not work as expected.

SCA-23055

Bring Your Own Key (BYOE) functionality failed for SCA.

SCA-23020

Scan times were too long.

SCA-22302

Report generation failed for specific scans.

AST-96914

The remote backend was unreachable.

AST-96688

Critical severity appeared unexpectedly in the UI.

AST-96534

Onboarding failed.

AST-95864

The /api/results filter with EXCLUDE_NOT_EXPLOITABLE did not work.

AST-93625

The Application Risk Management page showed "No Risks" on first access.

AST-93304

In VSCode, proxy-only users could not enable the scan button.

AST-89866

Scans intermittently returned 500 errors.

AST-89265

The CxIAM page failed to load.

AST-78569

SCM integrations did not display all groups or allow group search.

AST-64244

Scan results differed between the ZAP UI and Checkmarx One.

AST-94943

The Settings page showed duplicate IaC presets.

AST-74900

The IAM "Friendly Name" attribute in SAML mappers behaved inconsistently.

AST-94951

The SAML Identity Provider failed to set the Principal Attribute.

AST-94573

The Save button in IAM General Settings was disabled for some tenants.

AST-92091

The IAM "Groups, Filters and Dependencies" view showed data without enabling actions.

AST-89908

OAuth client edits were not saved in the new IAM UI.

AST-89783

Duplicate Identity Providers could be created in the new IAM UI.

AST-89726

The Endpoints link was removed from the SAML config page in the new IAM UI.