goklab/guardvibe releases

Upgrade now

v3.31.0 Security relevant · 3d

Auth RCE / SSRF Dependencies

Auth.js + Next.js fixes

Open

Review required

v3.30.0 New feature · 12d

Dependencies

IOC rules + version-pin rule

Open

Upgrade now

v3.29.0 Security relevant · 29d

RCE / SSRF Dependencies Breaking upgrade

CVE-2026-49252 + CVE-2026-55698

Open

Upgrade now

v3.28.0 Security · 1mo

Dependencies

i18next prototype pollution fixes

Open

Review required

v3.27.0 Feature · 1mo

RCE / SSRF

SQL‑injection taint detection

Open

Review required

v3.26.0 Breaking · 1mo

Auth RBAC

Inter‑procedural ownership detection

Open

Review required

v3.25.0 Bug fix · 1mo

Pre‑commit blocking + false‑positive reduction

Open

Upgrade now

v3.24.0 Security relevant · 1mo

Auth

CVE-2024-22206 fix

Open

Review required

v3.23.0 New feature · 1mo

Auth RBAC

VG1094 extension + VG973 narrowing

Open

Review required

v3.22.0 New feature · 1mo

Dependencies

hallucinated-packages scanner

Open

Upgrade now

v3.21.0 Security relevant · 1mo

Auth RBAC

Hono CORS fix

Open

Upgrade now

v3.20.0 Security · 1mo

Auth RCE / SSRF Dependencies

Security fixes

Open

Review required

v3.19.0 New feature · 1mo

Auth RBAC

secure_prompt tool

Open

No immediate action

v3.18.0 Breaking · 1mo

BOLA false‑positive fix

Open

No immediate action

v3.17.0 Breaking risk · 1mo

VG126 behavior change

Open

Review required

v3.16.0 Breaking risk · 1mo

Auth RBAC

AST‑aware VG950 suppression

Open

No immediate action

v3.15.0 Breaking risk · 1mo

AST/dataflow engine + VG406 improvements

Open

No immediate action

v3.14.2 Breaking risk · 1mo

VG964 false‑positive fix

Open

No immediate action

v3.14.1 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

Upgrade now

v3.14.0 Security relevant · 1mo

RCE / SSRF

CVE-2024-52011 fix

Open

No immediate action

v3.13.0 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

Review required

v3.12.0 New feature · 1mo

proofTest from secure_this

Open

Review required

v3.11.0 New feature · 1mo

Dependencies

Prioritized audit findings

Open

No immediate action

v3.10.0 New feature · 1mo

CVE prioritization + rule scaffolding

Open

Review required

v3.9.0 New feature · 1mo

default diff-aware scan

Open

Review required

v3.8.0 Bug fix · 1mo

Auth

Auth coverage crash fix

Open

Review required

v3.7.0 New feature · 1mo

Auth RCE / SSRF Dependencies

Three new CVE rules

Open

Review required

v3.6.0 Breaking risk · 1mo

RCE / SSRF

SSRF false‑positive reduction

Open

No immediate action

v3.5.0 New feature · 1mo

Agent output format

Open

Review required

v3.4.0 New feature · 1mo

Dependencies

Reachability annotation

Open

No immediate action

v3.3.0 New feature · 1mo

Diff‑aware default behavior

Open

No immediate action

v3.2.0 New feature · 1mo

secure_this tool

Open

No immediate action

v3.1.42 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.1.41 New feature · 1mo

FAQ addition

Open

Review required

v3.1.40 Feature · 1mo

Auth RBAC

Flags direct request body in Mongoose updates

Open

Review required

v3.1.39 New feature · 1mo

RCE / SSRF

SSRF taint detection

Open

Review required

v3.1.38 New feature · 1mo

RCE / SSRF

VG434 retargeted

Open

Review required

v3.1.37 New feature · 1mo

Auth RCE / SSRF

Taint analysis enhancements

Open

Review required

v3.1.36 New feature · 1mo

Auth RCE / SSRF

JWT bypass + DOM XSS detection

Open

No immediate action

v3.1.35 Bug fix · 1mo

False‑positive precision improvements

Open

Review required

v3.1.34 New feature · 1mo

RCE / SSRF Dependencies

ReDoS guard added

Open

No immediate action

v3.1.33 Bug fix · 1mo

Block‑comment stripping change

Open

Upgrade now

v3.1.32 Feature · 1mo

RCE / SSRF Dependencies

New CVE rules

Open

No immediate action

v3.1.31 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

Review required

v3.1.30 New feature · 1mo

Metadata consistency + audit gate

Open

Monitor

v3.1.29 New feature · 1mo

LLM stability + precision

Open

Review required

v3.1.28 New feature · 1mo

Auth

SQLi detection improvement

Open

No immediate action

v3.1.27 Feature · 1mo

SARIF emission + config warning

Open

Upgrade now

v3.1.26 Security relevant · 1mo

Auth RCE / SSRF

CVE fixes + SQL injection

Open

Review required

v3.1.25 Security relevant · 2mo

Dependencies Breaking upgrade

Malicious node-ipc detection + CI npm hardening

Open

No immediate action

v3.1.24 Maintenance · 2mo

Routine maintenance and dependency updates.

Open

Upgrade now

v3.1.23 New feature · 2mo

Dependencies Breaking upgrade

dep-CVE rules + dependency hygiene

Open

No immediate action

v3.1.22 New feature · 2mo

Enum recognition & mock dir support

Open

No immediate action

v3.1.21 Maintenance · 2mo

Rule exclusions + file‑type expansions

Open

No immediate action

v3.1.20 New feature · 2mo

Skip scaffold files for tRPC checks

Open

No immediate action

v3.1.19 New feature · 2mo

ai-chatbot test repo

Open

Review required

v3.1.18 Bug fix · 2mo

RCE / SSRF

Prototype pollution read‑access fix

Open

Review required

v3.1.17 Breaking risk · 2mo

Auth

Explicit return token required

Open

Config change

v3.1.16 Breaking risk · 2mo

Auth

Credential‑required connection strings

Open

Review required

v3.1.15 Bug fix · 2mo

RCE / SSRF

Tagged‑template query handling

Open

Review required

v3.1.14 Security relevant · 2mo

Auth RCE / SSRF

React CVE-2025-55182

Open

No immediate action

v3.1.13 New feature · 2mo

VG012 context‑aware skips

Open

Review required

v3.1.12 Maintenance · 2mo

RCE / SSRF

Routine maintenance and dependency updates.

Open

Review required

v3.1.11 Bug fix · 2mo

RCE / SSRF

SSRF pattern refinement

Open

Review required

v3.1.10 New feature · 2mo

Auth Dependencies

VG106 secret comparison

Open

No immediate action

v3.1.9 Bug fix · 2mo

Middleware matcher fix

Open

No immediate action

v3.1.8 Bug fix · 2mo

Taint walker excludes minified bundles

Open

Review required

v3.1.7 Bug fix · 2mo

Auth

VG409 false‑positive reduction

Open

No immediate action

v3.1.6 Maintenance · 2mo

Scope restrictions for VG955, VG506

Open

No immediate action

v3.1.5 Breaking risk · 2mo

Enum regex lowercasing requirement

Open

No immediate action

v3.1.4 Breaking risk · 2mo

ADD matching, USER/HEALTHCHECK skipping, .env file restriction

Open

Review required

v3.1.3 Bug fix · 2mo

Auth Breaking upgrade

VG010 explain correction

Open

No immediate action

v3.1.2 Bug fix · 2mo

Re-init upgrade flow fixed

Open

No immediate action

v3.1.1 Bug fix · 2mo

Manifest version fix

Open

No immediate action

v3.1.0 New feature · 2mo

Deep scan feature

Open

Review required

v3.0.57 Breaking risk · 2mo

Auth RBAC RCE / SSRF

SDK flag removals

Open

Review required

v3.0.56 Feature · 2mo

Auth RBAC Dependencies

AI-native security rules

Open

No immediate action

v3.0.55 Bug fix · 2mo

Taint walker directory skip

Open

No immediate action

v3.0.54 Breaking risk · 2mo

Removed markdown library names

Open

No immediate action

v3.0.53 New feature · 2mo

Lockfile reading for dep scanner

Open

No immediate action

v3.0.52 Bug fix · 2mo

Regex limit fix + enum skipping

Open

No immediate action

v3.0.51 Maintenance · 2mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.50 Bug fix · 2mo

Uniform severity caps

Open

No immediate action

v3.0.49 New feature · 2mo

--full CLI flag

Open

Review required

v3.0.48 Bug fix · 2mo

Auth RBAC

scan.exclude honored

Open

No immediate action

v3.0.47 New feature · 2mo

Suppression handling changes

Open

Upgrade now

v3.0.46 Bugfix · 2mo

RBAC

RPC RLS bypass fix

Open

Review required

v3.0.45 Maintenance · 2mo

Dependencies

CVE rule skip in lock files

Open

Review required

v3.0.44 Bug fix · 2mo

Auth

URL-input taint narrowing

Open

Review required

v3.0.43 New feature · 2mo

Auth RBAC

Query pattern skips + App Router handler skip

Open

No immediate action

v3.0.42 Maintenance · 2mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.41 New feature · 2mo

Skip pagination & private package checks

Open

No immediate action

v3.0.40 Bugfix · 2mo

VG132 fix for Next.js routes

Open

No immediate action

v3.0.39 Bugfix · 2mo

VG955 pagination fix

Open

Review required

v3.0.38 Bugfix · 2mo

Auth

VG106 check adjustment

Open

No immediate action

v3.0.37 Bugfix · 2mo

Unified grade boundaries

Open

No immediate action

v3.0.36 Feature · 2mo

Truncation hint in audit sections

Open

No immediate action

v3.0.35 Bugfix · 2mo

Test‑file rule skips

Open

No immediate action

v3.0.34 Bugfix · 3mo

VG430 conflict resolution + dedup rules

Open

No immediate action

v3.0.33 Bugfix · 3mo

Regex bug fix

Open

No immediate action

v3.0.32 Bugfix · 3mo

Suppress per-route VG030 with global rate limiter

Open

Config change

v3.0.31 Breaking · 3mo

Breaking upgrade

Pinned MCP config version

Open

No immediate action

v3.0.30 Feature · 3mo

guardvibe@latest write + pre-commit hook

Open

Review required

v3.0.29 Bugfix · 3mo

Auth

VG002 fix & middleware support

Open

No immediate action

v3.0.28 Feature · 3mo

GuardVibe skip rules

Open

No immediate action

v3.0.27 Feature · 3mo

CVE count reporting + rule count correction

Open

No immediate action

v3.0.26 Breaking · 3mo

VG964 Next.js requirement

Open

No immediate action

v3.0.25 Feature · 3mo

Seven new rules

Open

No immediate action

v3.0.24 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.23 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

Upgrade now

v3.0.22 Security relevant · 3mo

Auth RCE / SSRF

Security fixes

Open

Upgrade now

v3.0.21 Security · 3mo

Auth RCE / SSRF Dependencies

Security fixes

Open

Review required

v3.0.20 Breaking risk · 3mo

Auth RCE / SSRF

Rate limiter improvement

Open

No immediate action

v3.0.19 Feature · 3mo

Taint chain breaking

Open

Review required

v3.0.18 Feature · 3mo

Auth RBAC

Taint chain broken by sanitizers

Open

Review required

v3.0.17 Feature · 3mo

Auth

Diff‑to‑audit prevention

Open

Review required

v3.0.16 Bugfix · 3mo

Auth RBAC

Config fixes + audit JSON details

Open

No immediate action

v3.0.15 Feature · 3mo

sectionFindings detail

Open

Config change

v3.0.14 Breaking · 3mo

Breaking upgrade

GuardVibe npx invocation

Open

Review required

v3.0.13 Breaking · 3mo

Auth Breaking upgrade

Score includes all sections

Open

Config change

v3.0.12 Feature · 3mo

Auth

authExceptions + CLI support

Open

Review required

v3.0.11 Bugfix · 3mo

Auth RCE / SSRF

Scanner fixes + stronger AI remediation

Open

Review required

v3.0.10 Feature · 3mo

Auth Dependencies

Remediation plan embedded

Open

Review required

v3.0.9 New feature · 3mo

Remediation plan + verification

Open

Review required

v3.0.8 Feature · 3mo

Auth

Audit output & CLI wrappers

Open

Review required

v3.0.7 Bugfix · 3mo

Auth

VG1005 false‑positive fix

Open

No immediate action

v3.0.6 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.4 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.3 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

Review required

v3.0.2 Feature · 3mo

Auth

New security workflows

Open

No immediate action

v3.0.1 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.0 New feature · 3mo

Git‑aware secret scanner

Open

No immediate action

v2.9.9 Bugfix · 3mo

False positive fixes

Open

No immediate action

v2.9.8 Bugfix · 3mo

CLI exit code fix

Open

No immediate action

v2.9.7 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

No immediate action

v2.9.6 Bugfix · 3mo

False‑positive fixes

Open

Review required

v2.9.5 New feature · 3mo

RCE / SSRF Breaking upgrade

Import-aware fix detection

Open

No immediate action

v2.9.4 Bug fix · 3mo

Remediation pattern recognition

Open

Review required

v2.9.3 New feature · 3mo

RCE / SSRF Auth

Priority summary table

Open

No immediate action

v2.9.2 Breaking risk · 3mo

Truncated scan_directory

Open

No immediate action

v2.9.1 Breaking risk · 3mo

compliance_mapping rename

Open

No immediate action

v2.9.0 New feature · 3mo

Structured patches + verify_fix

Open

Review required

v2.8.0 New feature · 3mo

Dependencies RCE / SSRF

EU AI Act compliance + new security rules

Open

No immediate action

v2.7.4 New feature · 3mo

Security summary after CLI commands

Open

Monitor

v2.7.3 New feature · 3mo

Auth

Host security audit CLI

Open

Monitor

v2.5.0 New feature · 3mo

Cross-file taint analysis

Open

No immediate action

v2.4.5 New feature · 3mo

MCP Registry support

Open

No immediate action

v2.4.4 New feature · 3mo

Code coverage reporting

Open

No immediate action

v2.4.3 Maintenance · 3mo

Routine maintenance and dependency updates.

Open

No immediate action

v2.4.2 Maintenance · 3mo

Routine maintenance and dependency updates.

Open