Skip to content

cert-x-gen v1.2.0

Choose a tag to compare

View all tags
@Animesh-Sri-bugb Animesh-Sri-bugb released this 01 Aug 10:15
· 332 commits to main since this release
v1.2.0
3b58895
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

cert-x-gen v1.2.0

Features

  • AI-driven whitebox pentest pipeline — new AI-orchestrated pentest flow; the orchestrator is embedded via include_dir! so installs are self-contained (#10)
  • cxg update self-update command — update the CLI in place from the top level; config-directory resolution is now cross-platform (#12)
  • Operator-supplied identity metadata for pentest — --tier/--persona/--cohort/--tag on cxg pentest auth, fed to the AI ranker/generator for better privilege-escalation and cross-tenant coverage (#20)

Fixes

  • Pentest SPA session-health false-negative — authenticated single-page-app dashboards were being false-flagged as dead sessions, causing every probe in a run to be skipped; a live session is now confirmed with an authenticated API probe. Also fixes --skip-health-check not disabling the runtime monitor, and a mutation-retry crash on string-typed evidence (#20)

Security & dependencies

This release resolves 15 advisories across the dependency tree:

  • openssl 0.10.73 → 0.10.81 — clears 8 advisories (5 high): OCSP/AES-key-wrap/PSK-callback memory issues; vendored, so shipped in every binary (#14)
  • TLS/HTTP consolidation — reqwest 0.11 → 0.13, dropped unused direct rustls/tokio-rustls; collapsed three rustls stacks to one, clearing 4 rustls-webpki advisories including a high-severity CRL DoS (#17)
  • bytes 1.10.1 → 1.12.1 — integer overflow in BytesMut::reserve (#16)
  • git2 0.18 → 0.20.4 (libgit2-sys 1.7.2 → 1.9.6) — potential UB dereferencing Buf (#18)
  • prometheus 0.13 → 0.14 (protobuf → 3.7.2) — uncontrolled recursion in protobuf 2.x (#19)

Documentation

  • Documented public MCP request structs (#11)
  • Operator guide: identity tier/persona/cohort/tags (#20)

Full changelog: v1.1.1...v1.2.0

Assets 8
Loading