Skip to content

PRISM v2.2.0 — Security Hardening, Report i18n, Code Cleanup

Choose a tag to compare

View all tags
@NovaCode37 NovaCode37 released this 25 May 11:54
· 373 commits to main since this release
v2.2.0
f7d5837

Security Fixes

  • Webhook SSRF mitigation — all webhook URLs now validated against private/internal address ranges (closes #23)
  • Multi-tenant API key scoping — scan listings and access filtered by principal; no cross-tenant data leaks (closes #24)
  • SSRF guard hardened — DNS re-resolution check to prevent TOCTOU bypass on webhook delivery

New Features

  • Multilingual Report Engine ([modules/report_i18n.py] — PDF/HTML reports now support EN/RU/DE via ?lang= parameter
  • i18n keys added: precision, approximate for IP geolocation map markers
  • Copy button for AI summary (PR #19)

Version

2.1.0 → 2.2.0 (backend + frontend)

Compatibility

  • No breaking API changes
  • No new external dependencies
  • Drop-in upgrade from v2.1.x

Full Changelog

v2.1.0...v2.2.0

Assets 2
Loading