goklab/guardvibe releases

Review required

v3.1.25 Security relevant · 18d

Dependencies Breaking upgrade

Malicious node-ipc detection + CI npm hardening

Open

No immediate action

v3.1.24 Maintenance · 20d

Routine maintenance and dependency updates.

Open

Upgrade now

v3.1.23 New feature · 20d

Dependencies Breaking upgrade

dep-CVE rules + dependency hygiene

Open

No immediate action

v3.1.22 New feature · 1mo

Enum recognition & mock dir support

Open

No immediate action

v3.1.21 Maintenance · 1mo

Rule exclusions + file‑type expansions

Open

No immediate action

v3.1.20 New feature · 1mo

Skip scaffold files for tRPC checks

Open

No immediate action

v3.1.19 New feature · 1mo

ai-chatbot test repo

Open

Review required

v3.1.18 Bug fix · 1mo

RCE / SSRF

Prototype pollution read‑access fix

Open

Review required

v3.1.17 Breaking risk · 1mo

Auth

Explicit return token required

Open

Config change

v3.1.16 Breaking risk · 1mo

Auth

Credential‑required connection strings

Open

Review required

v3.1.15 Bug fix · 1mo

RCE / SSRF

Tagged‑template query handling

Open

Review required

v3.1.14 Security relevant · 1mo

Auth RCE / SSRF

React CVE-2025-55182

Open

No immediate action

v3.1.13 New feature · 1mo

VG012 context‑aware skips

Open

Review required

v3.1.12 Maintenance · 1mo

RCE / SSRF

Routine maintenance and dependency updates.

Open

Review required

v3.1.11 Bug fix · 1mo

RCE / SSRF

SSRF pattern refinement

Open

Review required

v3.1.10 New feature · 1mo

Auth Dependencies

VG106 secret comparison

Open

No immediate action

v3.1.9 Bug fix · 1mo

Middleware matcher fix

Open

No immediate action

v3.1.8 Bug fix · 1mo

Taint walker excludes minified bundles

Open

Review required

v3.1.7 Bug fix · 1mo

Auth

VG409 false‑positive reduction

Open

No immediate action

v3.1.6 Maintenance · 1mo

Scope restrictions for VG955, VG506

Open

No immediate action

v3.1.5 Breaking risk · 1mo

Enum regex lowercasing requirement

Open

No immediate action

v3.1.4 Breaking risk · 1mo

ADD matching, USER/HEALTHCHECK skipping, .env file restriction

Open

Review required

v3.1.3 Bug fix · 1mo

Auth Breaking upgrade

VG010 explain correction

Open

No immediate action

v3.1.2 Bug fix · 1mo

Re-init upgrade flow fixed

Open

No immediate action

v3.1.1 Bug fix · 1mo

Manifest version fix

Open

No immediate action

v3.1.0 New feature · 1mo

Deep scan feature

Open

Review required

v3.0.57 Breaking risk · 1mo

Auth RBAC RCE / SSRF

SDK flag removals

Open

Review required

v3.0.56 Feature · 1mo

Auth RBAC Dependencies

AI-native security rules

Open

No immediate action

v3.0.55 Bug fix · 1mo

Taint walker directory skip

Open

No immediate action

v3.0.54 Breaking risk · 1mo

Removed markdown library names

Open

No immediate action

v3.0.53 New feature · 1mo

Lockfile reading for dep scanner

Open

No immediate action

v3.0.52 Bug fix · 1mo

Regex limit fix + enum skipping

Open

No immediate action

v3.0.51 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.50 Bug fix · 1mo

Uniform severity caps

Open

No immediate action

v3.0.49 New feature · 1mo

--full CLI flag

Open

Review required

v3.0.48 Bug fix · 1mo

Auth RBAC

scan.exclude honored

Open

No immediate action

v3.0.47 New feature · 1mo

Suppression handling changes

Open

Upgrade now

v3.0.46 Bugfix · 1mo

RBAC

RPC RLS bypass fix

Open

Review required

v3.0.45 Maintenance · 1mo

Dependencies

CVE rule skip in lock files

Open

Review required

v3.0.44 Bug fix · 1mo

Auth

URL-input taint narrowing

Open

Review required

v3.0.43 New feature · 1mo

Auth RBAC

Query pattern skips + App Router handler skip

Open

No immediate action

v3.0.42 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.41 New feature · 1mo

Skip pagination & private package checks

Open

No immediate action

v3.0.40 Bugfix · 1mo

VG132 fix for Next.js routes

Open

No immediate action

v3.0.39 Bugfix · 1mo

VG955 pagination fix

Open

Review required

v3.0.38 Bugfix · 1mo

Auth

VG106 check adjustment

Open

No immediate action

v3.0.37 Bugfix · 1mo

Unified grade boundaries

Open

No immediate action

v3.0.36 Feature · 1mo

Truncation hint in audit sections

Open

No immediate action

v3.0.35 Bugfix · 1mo

Test‑file rule skips

Open

No immediate action

v3.0.34 Bugfix · 1mo

VG430 conflict resolution + dedup rules

Open

No immediate action

v3.0.33 Bugfix · 1mo

Regex bug fix

Open

No immediate action

v3.0.32 Bugfix · 1mo

Suppress per-route VG030 with global rate limiter

Open

Config change

v3.0.31 Breaking · 1mo

Breaking upgrade

Pinned MCP config version

Open

No immediate action

v3.0.30 Feature · 1mo

guardvibe@latest write + pre-commit hook

Open

Review required

v3.0.29 Bugfix · 1mo

Auth

VG002 fix & middleware support

Open

No immediate action

v3.0.28 Feature · 1mo

GuardVibe skip rules

Open

No immediate action

v3.0.27 Feature · 1mo

CVE count reporting + rule count correction

Open

No immediate action

v3.0.26 Breaking · 1mo

VG964 Next.js requirement

Open

No immediate action

v3.0.25 Feature · 1mo

Seven new rules

Open

No immediate action

v3.0.24 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.23 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

Upgrade now

v3.0.22 Security relevant · 1mo

Auth RCE / SSRF

Security fixes

Open

Upgrade now

v3.0.21 Security · 1mo

Auth RCE / SSRF Dependencies

Security fixes

Open

Review required

v3.0.20 Breaking risk · 1mo

Auth RCE / SSRF

Rate limiter improvement

Open

No immediate action

v3.0.19 Feature · 1mo

Taint chain breaking

Open

Review required

v3.0.18 Feature · 1mo

Auth RBAC

Taint chain broken by sanitizers

Open

Review required

v3.0.17 Feature · 1mo

Auth

Diff‑to‑audit prevention

Open

Review required

v3.0.16 Bugfix · 1mo

Auth RBAC

Config fixes + audit JSON details

Open

No immediate action

v3.0.15 Feature · 1mo

sectionFindings detail

Open

Config change

v3.0.14 Breaking · 1mo

Breaking upgrade

GuardVibe npx invocation

Open

Review required

v3.0.13 Breaking · 1mo

Auth Breaking upgrade

Score includes all sections

Open

Config change

v3.0.12 Feature · 1mo

Auth

authExceptions + CLI support

Open

Review required

v3.0.11 Bugfix · 1mo

Auth RCE / SSRF

Scanner fixes + stronger AI remediation

Open

Review required

v3.0.10 Feature · 1mo

Auth Dependencies

Remediation plan embedded

Open

Review required

v3.0.9 New feature · 1mo

Remediation plan + verification

Open

Review required

v3.0.8 Feature · 1mo

Auth

Audit output & CLI wrappers

Open

Review required

v3.0.7 Bugfix · 1mo

Auth

VG1005 false‑positive fix

Open

No immediate action

v3.0.6 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.4 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.3 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

Review required

v3.0.2 Feature · 1mo

Auth

New security workflows

Open

No immediate action

v3.0.1 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v3.0.0 New feature · 1mo

Git‑aware secret scanner

Open

No immediate action

v2.9.9 Bugfix · 1mo

False positive fixes

Open

No immediate action

v2.9.8 Bugfix · 1mo

CLI exit code fix

Open

No immediate action

v2.9.7 Maintenance · 1mo

Routine maintenance and dependency updates.

Open

No immediate action

v2.9.6 Bugfix · 1mo

False‑positive fixes

Open

Review required

v2.9.5 New feature · 1mo

RCE / SSRF Breaking upgrade

Import-aware fix detection

Open

No immediate action

v2.9.4 Bug fix · 1mo

Remediation pattern recognition

Open

Review required

v2.9.3 New feature · 1mo

RCE / SSRF Auth

Priority summary table

Open

No immediate action

v2.9.2 Breaking risk · 1mo

Truncated scan_directory

Open

No immediate action

v2.9.1 Breaking risk · 1mo

compliance_mapping rename

Open

No immediate action

v2.9.0 New feature · 1mo

Structured patches + verify_fix

Open

Review required

v2.8.0 New feature · 1mo

Dependencies RCE / SSRF

EU AI Act compliance + new security rules

Open

No immediate action

v2.7.4 New feature · 2mo

Security summary after CLI commands

Open

Monitor

v2.7.3 New feature · 2mo

Auth

Host security audit CLI

Open

Monitor

v2.5.0 New feature · 2mo

Cross-file taint analysis

Open

No immediate action

v2.4.5 New feature · 2mo

MCP Registry support

Open

No immediate action

v2.4.4 New feature · 2mo

Code coverage reporting

Open

No immediate action

v2.4.3 Maintenance · 2mo

Routine maintenance and dependency updates.

Open

No immediate action

v2.4.2 Maintenance · 2mo

Routine maintenance and dependency updates.

Open