Prowler

v5.29.1 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 20h Offensive & Pentesting

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

aws azure cis-benchmark cloud cloudsecurity compliance

+12 more

cspm security forensics gcp gdpr hardening iam multi-cloud python security-audit security-hardening security-tools

Summary

AI summary

Updates 🐞 Fixed, https://github.com/prowler-cloud/prowler/pull/11421, and API across a mixed release.

Type	Severity	Summary	CVE
Bugfix
Bugfix	Medium	Fixes N+1 query loading resources__tags when listing findings via GET /api/v1/findings. Fixes N+1 query loading resources__tags when listing findings via GET /api/v1/findings. Source: llm_adapter@2026-06-03 Confidence: high	—
Bugfix	Medium	Cleans up scan tmp output directory if `scan-report` fails, preventing disk‑full errors. Cleans up scan tmp output directory if `scan-report` fails, preventing disk‑full errors. Source: llm_adapter@2026-06-03 Confidence: high	—
Bugfix	Medium	Re‑raises I/O errors (e.g., ENOSPC) from OCSF output writer instead of logging and truncating files. Re‑raises I/O errors (e.g., ENOSPC) from OCSF output writer instead of logging and truncating files. Source: llm_adapter@2026-06-03 Confidence: high	—

Full changelog

GET /api/v1/findings N+1 query loading resources__tags when listing findings (#11420)
Clean up the scan tmp output directory when scan-report fails so partial files do not accumulate and fill the worker disk (No space left on device) (#11421)

OCSF output writer now re-raises I/O errors (e.g. ENOSPC) instead of logging them per finding and leaving a truncated file (#11421)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Prowler

Get notified when new releases ship.

About Prowler

Tool based on AWS-CLI commands for Amazon Web Services account security assessment and hardening.