Skip to content

v1.2.37

Latest

Choose a tag to compare

@hansott hansott released this 15 Oct 08:57
· 36 commits to main since this release
Immutable release. Only release title and notes can be modified.
  • Adds track() so Playbooks can act on custom events like failed logins
  • Adds support for apps running under uWSGI
  • Adds support for XML parsing when the XML is passed as bytes instead of a string
  • Zen now also inspects headers and query strings in ASGI apps that use a charset other than UTF-8
  • Improves detection of attacks in very deeply nested request data
  • Improves NoSQL injection detection in very deeply nested request data
  • Improves attack wave detection by recognizing requests for .php, .jsp, and other extensions that a Python app wouldn't serve
  • Fixes attack waves missing from the statistics reported to Aikido
  • Fixes set_rate_limit_group() ignoring the group ID 0
  • Fixes deeply nested arrays in request bodies causing missing stats and API discovery data
  • Fixes inaccurate timestamps for attacks, attack waves, and custom events
  • Fixes Zen startup errors on Python 3.13 and earlier when using forkserver
  • Fixes delayed memory cleanup after blocking attacks
  • Fixes requests being slower right after startup while Zen is still loading its first config
  • Frees memory sooner after building an attack's stack trace
  • Speeds up building stack traces for attacks
  • Speeds up SQL injection checks
  • Reduces the data exchanged between app workers and Zen's background process
  • Sends the first heartbeats earlier after startup, at 30 seconds and 2 minutes