Skip to content

v1.2.36b0

Pre-release
Pre-release

Choose a tag to compare

@hansott hansott released this 24 Jul 16:21
· 19 commits to main since this release
Immutable release. Only release title and notes can be modified.
  • Add support for Python 3.14 (Only Python builds with GIL enabled)
  • Prepare support for multiple data regions
  • Add opt-in real-time config updates via SSE (AIKIDO_FEATURE_SSE=true)
  • Improve path traversal and SQL/NoSQL injection detection when the request body contains invalid UTF-8 bytes
  • Improve SQL injection detection (when user input has leading or trailing whitespace)
  • Improve path traversal detection (case-insensitive)
  • Improve NoSQL injection detection (when apps merge their own $ operators with user input)
  • Fix stats, hostname, and user data being discarded when recorded while a sync to the background process was still in progress
  • Fix background process failing to start when multiple Gunicorn workers race to remove a stale socket
  • Fix per-route IP allowlisting, blocked users, and rate limits not applying yet right after a worker process starts
  • Fix bypassed IPs not skipping allowlist/blocklist checks, user blocking, and rate limiting
  • Fix outgoing domain ports being reported as text instead of numbers