C#: Some files that could not be fully analyzed were analyzed completely, including files with certain property accessors and certain tuple loops that previously failed during analysis. Projects containing them showed new findings.
C#: Analysis was faster for large projects during the resolver stage.
Java: Reflected XSS detection in Java_High_Risk/Reflected_XSS excluded inputs from REST methods that returned JSON, removing false positives. Some existing findings were resolved.
Java: Resolver performance was improved for large, generated codebases.
Scala: Analysis of files with deeply nested expressions completed. Projects containing them showed new findings. Scan time was also reduced for these projects.
Presets: A new OWASP Top 10 for LLM preset and category was added. Existing presets were unchanged.
Core engine: Engine version information became clearer in the engine scan log.
Core engine: Verbose logging included debug-level messages when engine verbose mode was on. Scan results were not changed.
Core engine: Third-party dependencies were updated to address security advisories.
API: The SucceededGeneralQueries and statistics APIs returned the expected counts for queries of type General.