Prowler

v5.32.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 20d Offensive & Pentesting

✓ No known CVEs patched

This release patches 1 known CVE

Topics

aws azure cis-benchmark cloud cloudsecurity compliance

+12 more

cspm security forensics gcp gdpr hardening iam multi-cloud python security-audit security-hardening security-tools

Affected surfaces

auth rbac

Summary

AI summary

Updates 🐞 Fixed, https://github.com/prowler-cloud/prowler/pull/11752, and 🔐 Security across a mixed release.

Full changelog

Invitation callback paths are now preserved when invited users continue with Google, GitHub, or SAML authentication (#11752)

Attack Paths: Scan rows now have database defaults for is_migrated and sink_backend so scan-perform-scheduled inserts survive deploy skew (#11826)
Invited users now keep their invitation context when completing authentication with Google, GitHub, or SAML, so the invitation is accepted during login (#11752)

User profile updates now allow users to update their own account while requiring user-management permissions to update other users in the same tenant (#11792)

KeyError: 'MANUAL' crash while rendering the compliance summary table (e.g. CIS Microsoft 365) when a framework has manual, checks-less requirements with a Level 1/Level 2 profile; MANUAL findings are now skipped in the PASS/FAIL section tally instead of raising (#11822)

User profile updates enforce user‑management permission checks, preventing unauthorized modifications of other users

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Prowler

Get notified when new releases ship.

About Prowler

Tool based on AWS-CLI commands for Amazon Web Services account security assessment and hardening.

v5.34.0 Renames UI integration enable flags to past tense (e.g., UI_SENTRY_ENABLE → UI_SENTRY_ENABLED).