2023.08.03

Download Show checksums

New API functionality for comments

  • The API now supports creation, modification, and retrieval of assessment comments, finding comments, finding retest requests, and finding retests.
  • You can reply to finding comments, assessment comments, finding retest requests, and finding retests.
  • You can retrieve these events as an include with a finding or assessment.
  • Replies to comments can be retrieved as an include from corresponding comments, retests, etc. For example, you can GET a finding and include comments.replies.

Improvements

  • Caution tags are now also rendered in the PDF report making it consistent with the online report.
  • Updated CWE classifications to v4.12.
  • The output file parsers have been updated for improved performance and data extraction.
  • When encountering errors during output file parsing, error messages now provide more detailed context to facilitate troubleshooting.

Bugfixes

  • Resolved an issue preventing the retrieval of PDF reports via the API.
  • Fixed an issue where the 'Highest Risk' badge in CVSS assessments sometimes showed the highest category, but not the highest score.
  • Fixed a bug where resolved retests could not be set back to unresolved.
  • Fixed a bug where the 'General activity' link was not functioning correctly on the activities page.
  • Fixed an issue where provisional events in the schedule had no associated users.
  • Fixed an issue where assessment sections could not be emptied by editing them in the online report.
  • Fixed an issue where the status of a retest was not shown in the researcher panel.
  • Fixed an issue where caution tags, @tags and component tags were sometimes rendered incorrectly.
  • Fixed a crash when evaluating findings suggested as new templates if the finding has resolvers.
  • Fixed an issue where users were notified twice if output file parsing failed.
  • Fixed a rare exception when deleting an assessment.
  • Addressed a rendering issue for long words with Unicode characters in the PDF reports.
  • Fixed an issue where the next_deadline field was sometimes set incorrectly.