All pull requests

Pull requests

• Drop the packaging runtime dependency

  #766·iacobdaniel opened Oct 23, 2026Contributor·

  ·
  1

• Add Odoo support

  #759·iacobdaniel opened Oct 19, 2026Contributor·

  ·

• Use the zen-internals IP matcher

  #757·iacobdaniel opened Oct 19, 2026Contributor·

  ·
  36

• Scan XML bodies from all Python XML parsers

  #754·iacobdaniel opened Oct 14, 2026Contributor·

  ·
  5

• Stop sending internal type name in the schema

  #753·iacobdaniel opened Oct 12, 2026Contributor·

  ·

• Treat a missing client IP as not bypassed

  #732·iacobdaniel opened Oct 6, 2026Contributor·

  ·

• Scan XML element text and attributes at any depth

  #730·iacobdaniel opened Oct 5, 2026Contributor·

  ·
  4

• [Aikido] Fix 2 security issues in wrapt, regex

  #715·aikido-autofix[bot] opened Sep 8, 2026Bot·

  ·

• Add support for Odoo 16-19

  #708·hansott opened Sep 2, 2026Member·

  ·

• Add Odoo sample app

  #705·hansott opened Sep 1, 2026Member·

  ·

• Switch IP matcher implementation

  #701·timokoessler opened Aug 21, 2026Member·

  ·
  9

• Add install test without toolchain

  #700·timokoessler opened Aug 21, 2026Member·

  ·
  3

• Fix issue

  #689·zen-triager-bot opened Aug 7, 2026·

  ·
  1

• Block dangerous AI tool calls via run_vulnerability_scan.

  #678·iacobdaniel opened Jul 30, 2026Contributor·

  ·

• pymongo: Scan _doc & scan a bunch more operations

  #653·bitterpanda63 opened Jun 15, 2026Contributor·

  ·

• Trim trailing dot from trusted IMDS hostnames

  #652·bitterpanda63 opened Jun 8, 2026Contributor·1 task·

  ·

• Store body_raw as well as a fix for bb report

  #649·bitterpanda63 opened Jun 2, 2026Contributor·

  ·
  2

• Add protect mode validation

  #628·tomaisthorpe opened Apr 30, 2026Contributor·

  ·

• Add idor protection

  #627·bitterpanda63 opened Apr 28, 2026Contributor·

  ·

• Skip wave-attack detection for bypassed requests

  #624·bitterpanda63 opened Apr 16, 2026Contributor·3 of 4 tasks·

  ·

• Skip context creation for bypassed IPs

  #623·bitterpanda63 opened Apr 16, 2026Contributor·5 of 6 tasks·

  ·

• Include query string in URL for ASGI/WSGI requests

  #622·bitterpanda63 opened Apr 16, 2026Contributor·4 of 5 tasks·

  ·

• Add routers to our fastapi app for testing

  #600·bitterpanda63 opened Mar 27, 2026Contributor·

  ·

• Block SQL queries that fail tokenization

  #599·hansott opened Mar 27, 2026Member·

  ·
  1

• Remove the broken "Host" header logic for isRequestToItself

  #596·bitterpanda63 opened Mar 16, 2026Contributor·

  ·