v24.9.1 - 24 September 2024

This update includes changes to the internal agents. The internal scan agent’s current version is 24.9.1. The internal authentication verifier agent’s current version is 24.9.1.

New Feature

• Administrators can now assign Agent Groups to Teams for greater control over agents and the teams that can use them. Contact our Support team to activate this feature.

New Security Checks

• Added XWiki version disclosure vulnerability and attack patterns.

Improvements

• Added improvements to the Mend SAST integration.
• Target to Project mapping is now available via API for the Mend SAST integration.

Fixes

• Fixed the issue where tagging in the Discovery service would create a single-character tag when converted to a target.
• Fixed an issue where the encryption process remained pending and incomplete after starting encryption key generation.
• Fixed a bug in the API where '/api/1.0/issues/allissues' always returned NULL in the History field.
• The option to suspend all future scans is now available to all customers in Scans Control Settings.
• Fixed the false negative issue related to Polyfill.io.
• Fixed an issue related to creating a custom script for a web application using the OIDC method with a login pop-up.
• Fixed the issue where the scan summary page did not time out according to the settings.