v25.11.0 - 11 November 2025

This update includes changes to the internal agents. The internal scan agent’s current version is 25.11.0. The internal authentication verifier agent’s current version is 25.11.0.

New features

• Added support for referencing secrets from SEM integrations when configuring Basic, Digest, NTLM/Kerberos, or Negotiate authentication

Improvements

• Added "Fix versions" field to the JIRA integration
• Added "Queue reason" to the Scan summary page
• Improved IP Restriction Logic
• Improved the "SameSite Cookie Not Implemented" security check
• Improved the "JWT Signature is not Verified" security check

Resolved issues

• Fixed a layout problem when adding a new certificate
• Fixed an issue showing wrong Vulnerability Database (VDB) version
• Fixed a cache cleaning issue
• Fixed an issue where users without an API Discovery license saw the error “ApiHub Service URL cannot be empty” when updating items on the Settings > General page
• Fixed "The deletion of the website continues" issue when adding a target
• Fixed an empty list issue in the Mend integration
• Fixed an issue where Linux/cloud agents couldn't parse secrets pre-request query parameters
• Updated Java sensor
• Fixed an issue with confirmation SMS messages

‍