Releases: cerberauth/vulnapi
Releases · cerberauth/vulnapi
v0.8.7
What's Changed
- Add Healthcheck endpoints discovery scan by @emmanuelgautier in #241
- fix: nil pointer exceptions by @emmanuelgautier in #242
- fix(deps): update all non-major dependencies by @emmanuelgautier in #245
- ci: fix snapcraft and choco cli install by @emmanuelgautier in #246
Full Changelog: v0.8.6...v0.8.7
v0.8.6
New Feature
- Discover Well-Known paths and leaked files by @emmanuelgautier in #240
What's Changed
- Make discovery faster by @emmanuelgautier in #237
- Remove OpenAPI and GraphQL discovery from cURL scan by @emmanuelgautier in #238
- Make weak JWT scan offline and faster by @emmanuelgautier in #239
Full Changelog: v0.8.5...v0.8.6
v0.8.5
What's Changed
- Add HTTP Basic support by @emmanuelgautier in #231
- Fix: Authentication bypass false positive by @emmanuelgautier in #232
- Fix: Manage openapi wrongly parsed example params and unsupported media types by @emmanuelgautier in #235
Full Changelog: v0.8.4...v0.8.5
v0.8.4
What's Changed
- Refactor security schemes by @emmanuelgautier in #221
- Update seclists by @emmanuelgautier in #226
- CI: Add OpenAPI and API Key automated tests by @emmanuelgautier in #227
- Add API Key authentication support by @emmanuelgautier in #228
- Limit the depth when openapi params reference itself by @emmanuelgautier in #229
Full Changelog: v0.8.3...v0.8.4
v0.8.3
What's Changed
- Add HTTP Misconfigurations scans by @emmanuelgautier in #208
- Add HTTP Method override scan by @emmanuelgautier in #209
- Add setter and getter for default client by @emmanuelgautier in #212
- Refactor request package by @emmanuelgautier in #213
- Add stale github workflow by @emmanuelgautier in #214
- Improve Graphql introspection scan by @emmanuelgautier in #215
- Add SQA errors and more metrics by @emmanuelgautier in #218
- Update docs by @emmanuelgautier in #219
- chore: update dependencies by @emmanuelgautier in #220
Full Changelog: v0.8.2...v0.8.3
v0.8.2
What's Changed
- Add golangci lint by @emmanuelgautier in #198
- Prepare to move to nextra 3 remote files by @emmanuelgautier in #199
- Docs: add copy buttons by @emmanuelgautier in #200
- fix(deps): update all non-major dependencies by @renovate in #188
- Refactor report by @emmanuelgautier in #184
- fix: status_code to statusCode in report output by @emmanuelgautier in #201
- Tests scans with challenges by @emmanuelgautier in #186
- Keep JWT claims in the same order by @emmanuelgautier in #195
- Scan for different None Alg by @emmanuelgautier in #203
- Add scan tabs and jwt null signature example by @emmanuelgautier in #204
- Add more curl placeholders by @emmanuelgautier in #205
- Improve CLI scan output by @emmanuelgautier in #206
- Update asciinema demo by @emmanuelgautier in #207
Full Changelog: v0.8.1...v0.8.2
Special thanks to @Maxouhell for providing valuable feedback and helping with the design of the file report.
v0.8.1
What's Changed
- chore: add more homebrew test by @emmanuelgautier in #182
- Add no-progress scans arg by @emmanuelgautier in #185
- fix: add security schemes when operation is not nil by @emmanuelgautier in #190
- Include and exclude scans before execution step by @emmanuelgautier in #191
- Increase rate limit for discovery tests by @emmanuelgautier in #193
- Set the JWT expiration time in the future if the token has expired by @emmanuelgautier in #192
- Add jwt weak secret in report data by @emmanuelgautier in #194
- Add summary report output with scans number per status by @emmanuelgautier in #196
- Revert homebrew tests by @emmanuelgautier in #197
Full Changelog: v0.8.0...v0.8.1
v0.8.0
What's Changed
- fix choco doc link by @emmanuelgautier in #162
- feat: scan report output by @emmanuelgautier in #165
- Update docs by @emmanuelgautier in #170
- upgrade yaml pkg v3 by @emmanuelgautier in #171
- fix: include all scans by default by @emmanuelgautier in #169
- fix(deps): update all non-major dependencies by @renovate in #163
- Prepare new homebrew formula to be published by @emmanuelgautier in #168
- Use stderr when at least one vuln is higher than a threeshold by @emmanuelgautier in #174
- Make seclists embedded in build by @emmanuelgautier in #177
- fix(deps): update github.com/cerberauth/x digest to 0a38dd3 by @renovate in #178
- fix(deps): update module github.com/projectdiscovery/wappalyzergo to v0.1.21 - autoclosed by @renovate in #176
- feat: add timeout and disable retry with sqa by @emmanuelgautier in #179
Full Changelog: v0.7.3...v0.8.0
v0.7.3
What's Changed
- fix(deps): update all non-major dependencies by @renovate in #153
- fix(deps): update github.com/cerberauth/x digest to 179f1e7 by @renovate in #154
- chore: move documentation to main repo by @emmanuelgautier in #156
- chore: update vuln docs by @emmanuelgautier in #158
- ci: upgrade go version from 1.22 to 1.23 by @emmanuelgautier in #159
- fix(deps): update all non-major dependencies by @renovate in #155
- Goreleaser SBOM by @emmanuelgautier in #160
- fix(deps): update github.com/cerberauth/x digest to d0ec204 by @renovate in #157
- feat: add include and exclude scans flags by @emmanuelgautier in #161
Full Changelog: v0.7.2...v0.7.3
v0.7.2
What's Changed
- generate fake request body data by @emmanuelgautier in #152
Full Changelog: v0.7.1...v0.7.2