3.5.100

New issue

Open

Due by November 9, 2026

•Last updated Nov 4, 2026

Weekly patch release

47% complete

fix(api): sanitize the OpenAPI schema download filename so a crafted ?version= cannot 500
Unread
#16656 opened Nov 2, 2026 · Updated Nov 2, 2026
1
docs(users): describe permission audit, access from the user and group pages, and View As User
Unread
#16641 opened Oct 30, 2026 · Updated Nov 3, 2026
feat(locations): accept legacy writes on /api/v2/endpoints and /endpoint_status
Unread
#16404 opened Oct 18, 2026 · Updated Nov 2, 2026
1
docs(pro): mark a fourth wave of Pro feature flags as generally available
Unread
#16526 opened Oct 23, 2026 · Updated Nov 2, 2026
4
docs: document the Asset Risk meter in Pro
Unread
#16528 opened Oct 23, 2026 · Updated Nov 2, 2026Draft
feat(api): name the deprecated fields a request uses, and mark them in the schema
Unread
#16529 opened Oct 23, 2026 · Updated Nov 2, 2026Draft
feat(github): deprecate the GitHub issue integration for removal in 3.6.0
Unread
#16534 opened Oct 24, 2026 · Updated Nov 2, 2026Draft
docs(mcp): connect with the Authorization header; drop the URL argument from the prompt
Unread
#16577 opened Oct 27, 2026 · Updated Nov 2, 2026
docs(pro): every user accepts the End User License Agreement once
Unread
#16671 opened Nov 2, 2026 · Updated Nov 3, 2026
chore(docker): slim the django runtime image and strip setuid bits
Unread
#16581 opened Oct 27, 2026 · Updated Nov 2, 2026
docs(connectors): DefectDojo source connector page and both migration paths
Unread
#16502 opened Oct 22, 2026 · Updated Nov 5, 2026Draft
2
docs(triage engine): Give a Group Access and Assign an Issue Tracker Mapping asset actions
Unread
#16479 opened Oct 21, 2026 · Updated Nov 2, 2026Draft
docs(saml): document User Identifier Source and Match Users By
Unread
#16322 opened Oct 13, 2026 · Updated Nov 2, 2026
2
docs(groups): describe the per-group landing page
Unread
#16277 opened Oct 9, 2026 · Updated Nov 2, 2026Draft
5
perf(finding): ID-first list strategy for Finding API pagination
Unread
#16150 opened Sep 30, 2026 · Updated Nov 2, 2026
8
Add Strix scan parser
Unread
#16079 opened Sep 24, 2026 · Updated Nov 2, 2026
3
feat(parsers): add native NIST OSCAL 1.2.3 assessment-results parser
Unread
#15687 opened Aug 17, 2026 · Updated Nov 2, 2026
2
docs(risk-acceptance): explain how to give a team read-only access to risk acceptances
Unread
#16679 opened Nov 3, 2026 · Updated Nov 3, 2026
feat(export): reference data, check lists, contacts, the announcement and file caps in the product export
Unread
#16680 opened Nov 3, 2026 · Updated Nov 5, 2026Draft
docs(pro): describe what the Asset Compliance tab shows
Unread
#16691 opened Nov 4, 2026 · Updated Nov 4, 2026
docs(calendar): document the Interactive default for the Pro calendar
Unread
#16694 opened Nov 4, 2026 · Updated Nov 4, 2026
docs(threat-intel): document the Exploit Evidence filter; on by default since 3.2.200
Unread
#16699 opened Nov 4, 2026 · Updated Nov 4, 2026

Issues