Release Notes 2024.6.0
New features and enhancements in Seeker 2024.6.0
General Improvements
HTTP Requests displayed by Seeker in vulnerability findings can now be copied as cURL commands. This will allow users to quickly replay requests in their own environment and explore the findings manually, modifying any fields of a request as needed.
Usability Improvements
It is now possible to click on vulnerability counts in the Compliance Summary page for a project to navigate directly to the vulnerabilities that make up the count. This will open the Vulnerabilities page of the project with the filters preset to include only the relevant vulnerabilities.
Related Information: See View Compliance Status in the documentation.
Agents
Technologies | Featuresx |
Node.js |
Seeker now supports Node.js version 22. The agent can now be configured to automatically suspend upon detection of high CPU or memory usage on the application under test. See Configure Suspending Agent on High Resource Usage in the docs. |
Go | The Go agent now supports building with Go workspaces. |
Java | JAX-RS and Spring MVC regexes in path parameters are now treated as sanitizers by default. The types treated as sanitizers can be controlled by the environment variable SEEKER_AGENT_PATH_SANITIZERS. See Advanced Agent Settings. |
Checkers
The following vulnerability checkers have been added, enhanced, or changed:
Technologies | Name | New/Enhanced/Changed |
.NET Core | NoSQL Connection Parameter Pollution | New |