Skip to content

Temu v1.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 May 14:57
· 24 commits to main since this release
v1.2.0
a75dc56

[1.2.0] — 2026-05-20

Feature release for risk-aware rules and expanded rules-as-code automation.

Added

  • Added risk_level and requires_confirmation metadata for vulnerability rules.
  • Added --allow-risky-rules and TEMU_ALLOW_RISKY_RULES=true opt-in controls for intrusive, destructive, or DoS-prone rules.
  • Added bundled OWASP Juice Shop, Angular Material, and exposed Prometheus metrics detection coverage.
  • Expanded temu-rules automation to promote low-risk upstream fingerprint and dictionary updates into active rule files.

Changed

  • Risky rules are loaded but skipped by default unless the operator explicitly opts in.
  • Rules-as-code documentation now distinguishes safe default rules from operator-accepted risky probes.

Fixed

  • Tightened the Django fingerprint rule to avoid matching generic X-Frame-Options: SAMEORIGIN headers as Django.
Assets 5
Loading