v1.0.11

What's Changed

• Performance optimizations due to reduced IPC usage
• Minor changes to branding (Firewall to Zen transition)
• Bugfix for possible exploit when using Mapping in NoSQL which is not a dict.

v1.0.10

What's Changed

• Improved detection for noSQL injection
• Fix issue reporting to Aikido dashboard

v1.0.9

What's Changed

• Better protection against shell injection
• Reports multiple ports for outbound domains
• Minor bugfixes

Full Changelog: v1.0.8...v1.0.9

v1.0.8

What's Changed

• Add badges to README.md
• AIK-3627 Switch to time.monotonic wherever necessary
• improve unit test coverage
• improve API discovery

v1.0.7

What's Changed

• Add extra shell commands (See #193 )
• Add experimental API Discovery feature (See #190 and #194 )
• Check supported package versions (See #191 )
• Clarify installation instructions (See #196 )

Full Changelog: v1.0.6...v1.0.7

v1.0.6

What's Changed

• Add support for Starlette
• Bugfix: Make sure builtins.open is also covered for path traversal
• Improve support for ASGI Django
• Expand path traversal support for byte-like files and PurePath
• Improve unit test coverage

Re-release under "aikido_zen" branding

Re-release under aikido_zen branding

v1.0.4

What's Changed

• Bugfix: subprocess arguments wrongly parsed (Includes os.popen unit tests) by @bitterpanda63 in #166
• Bugfix: Add missing os.open sink with unit tests by @bitterpanda63 in #167
• Preventative bugfix : try-except both django middleware and request_handler function by @bitterpanda63 in #168
• Add missing seperators < and > in shell injection algorithm by @bitterpanda63 in #165
• Add new README.md copy for rename by @kapyteinaikido in #164
• Update django-postgres to add gunicorn, use specific versions and fix db models by @bitterpanda63 in #169

Full Changelog: v1.0.3...v1.0.4

v1.0.3

What's Changed

• Bugfix : Ensure comms are always set in codebase before sending (limit errors/early returns) by @bitterpanda63 in #160
• Bugfix : Await req.form in Quart by @bitterpanda63 in #161
• Bugfix: Make lifecycle cache optional for SSRF by @bitterpanda63 in #162

Full Changelog: v1.0.3...v1.0.3

v1.0.2

What's changed

• Importhook remove logging by @bitterpanda63 in #158

Full Changelog: v1.0.1...v1.0.2