Skip to content

2.16.6
Compare
Choose a tag to compare
@juanjux juanjux released this 11 Dec 16:35
v2.16.6
d5f9c27
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

Bug Fixes

  • SCA:

    • Ensure that Telemetry heartbeats are not skipped for forked processes, as doing so could result in the dependency list being lost over time.

  • Code Security:

    • Resolve a patching issue with psycopg3.
    • Resolve an issue where the modulo (%) operator would not be replaced correctly for bytes and bytesarray if IAST is enabled.
    • Ensure IAST SSRF vulnerability redacts the url query parameters correctly.

  • Lib-Injection:

    • Fix injection guardrail check when sys.argv is not available.

  • Profiling

    • Updates setup.py to ignore int-ptr conversion warnings for the profiler stack.pyx file. This is important because gcc 14 makes these conversions an error, alpine 3.21.0 ships with gcc 14, and any patch version of a Python alpine image cut after December 5th, 2024, will have this issue.
Assets 2
Loading