Skip to content

2.2.3

Choose a tag to compare

@gnufede gnufede released this 17 Jan 16:18
· 1 commit to 2.2 since this release
4badc2c

Bug Fixes

  • IAST: Don't split AST Assign nodes since it's not needed for propagation to work.
  • Vulnerability Management for Code-level (IAST): Cookies vulnerabilities are only reported if response cookies are insecure.
  • Vulnerability Management for Code-level (IAST): Ensure that Cookies vulnerabilities report only the cookie name.
  • Vulnerability Management for Code-level (IAST): Fix an unhandled ValueError in ast_function thrown in some cases (i.e. Numpy arrays when converted to bool).
  • psycopg: This fix resolves an issue where exceptions originating from asynchronous Psycopg cursors were not propagated up the call stack.