iframe-proxy | Sunbelt Computer Software

Source Code Disclosure - File Inclusion (43) raises High on an extensionless URL that only reflects the parameter

zaproxy/zaproxy#9514 · opened

on Oct 27, 2026

MCP add-on: reading a large `zap://alerts/<ref>` resource closes the MCP connection

zaproxy/zaproxy#9513 · opened

on Oct 26, 2026

1

Zip-slip in language pack import: entry names can be written outside the install dir (LangImporter)

zaproxy/zaproxy#9506 · opened

on Oct 23, 2026

SetContextCheckingStrategy fails due to empty pollData and pollHeaders in POLL_URL strategy

zaproxy/zaproxy#9501 · opened

on Oct 19, 2026

pscan: recordsToScan leaves out queued messages

zaproxy/zaproxy#9499 · opened

on Oct 16, 2026

2

Out-of-band XSS sends malformed event-handler payloads

zaproxy/zaproxy#9494 · opened

on Oct 9, 2026

3

Interactsh HTTPS callbacks fail TLS validation and event parsing

zaproxy/zaproxy#9493 · opened

on Oct 9, 2026

Add active scan rule for invalid monetary amounts accepted by an API

zaproxy/zaproxy#9491 · opened

on Oct 5, 2026

2

Selenium throws a lot of Java-Exceptions

zaproxy/zaproxy#9483 · opened

on Sep 28, 2026

2

Filtering on alertRef is not working

zaproxy/zaproxy#9476 · opened

on Sep 22, 2026

7

Modern spider doesn't respect the specified time limit

zaproxy/zaproxy#9471 · opened

on Sep 18, 2026

2

Add support for HTTP/3

zaproxy/zaproxy#9463 · opened

on Sep 13, 2026

3

gRPC add-on fails to handle native application/grpc bodies because VariantGrpc assumes Base64

zaproxy/zaproxy#9450 · opened

on Sep 3, 2026

5

Session persistence fails with HSQLDB RowInputBinary / EOFException due to corrupt HISTORY index

zaproxy/zaproxy#9445 · opened

on Aug 31, 2026

4

Client Spider gives up on slow-booting SPAs: out-of-scope asset downloads do not count as page activity

zaproxy/zaproxy#9440 · opened

on Aug 26, 2026

4

SOAP add-on: SSRF + local-file access via wsdl:import/xsd:import (auto-triggered by WSDL spider)

zaproxy/zaproxy#9438 · opened

on Aug 25, 2026

[Site-tree] Add newly found subdomains and links as node to Sites without visiting the url.

zaproxy/zaproxy#9426 · opened

on Aug 19, 2026

5

graphql: Imports may fail silently

zaproxy/zaproxy#9407 · opened

on Jul 24, 2026

Unable to specify rules with dashes in OUTOFSCOPE/IGNORE rules

zaproxy/zaproxy#9394 · opened

on Jul 16, 2026

3

Login URL field not showing automatically in Authentication tester form

zaproxy/zaproxy#9387 · opened

on Jul 12, 2026

1

Browsers launched by the Client Spider re-request the same static resources repeatedly

zaproxy/zaproxy#9386 · opened

on Jul 10, 2026

4

`deleteAlerts` and `deleteAlert` throw a `NullPointerException` when an alert has an invalid site node reference

zaproxy/zaproxy#9383 · opened

on Jul 9, 2026

1

`DeleteAlerts` endpoint does not delete duplicate alerts

zaproxy/zaproxy#9382 · opened