Version 6.3.2

Changes in this Release

• Reduced chance of rate limiting when download files from NVD (see #2670).
• Fixed bug causing some transitive dependencies being skipped in the odc-maven-plugin (see #3627).
• See the full listing of changes.

Version 6.3.1

Changes in this Release

• Fixed ConcurrentModificationException
• See the full listing of changes.

Version 6.3.0

Changes in this Release

• Many updates were made to improve performance on large scans, reduce false positives, and other bug fixes.
• Increased the width of four columns in the database; if you use a an external database you should also update the width (see upgrade_5.1.sql).
• See the full listing of changes.

Version 6.2.2

Changes in this Release

• Resolved issue with database connections introduced in 6.2.0 (see #3432).
• See the full listing of changes.

Version 6.2.1

Changes in this Release

• Resolved issue with database connections introduced in 6.2.0 (see #3416).
• See the full listing of changes.

Version 6.2.0

Changes in this Release

• Added an experimental Perl CPAN analyzer #3378
• Improved database performance #3206
• The archive analyzer now extracts files from RPM archives #3226
• Ensure ordered output in reports #3243
• Several minor bug fixes and updates to reduce false positives
• See the full listing of changes.

Version 6.1.6

Changes in this Release

• Resolved issue with Sarif report (#3243)
• Resolved issue with Ruby Bundle Audit (#3256)
• Several minor bug fixes and updates to reduce false positives
• See the full listing of changes.

Version 6.1.5

Changes in this Release

• Fixed a second NPE introduced in 6.1.3 (see #3246)
• See the full listing of changes.

Version 6.1.4

Changes in this Release

• Fixed an NPE introduced in 6.1.3 (see #3212)
• See the full listing of changes.

Version 6.1.3

Changes in this Release

• Modified the new CPE matching strategy to be more performant (#3207)
• Upgraded a vulnerable dependency (velocity-engine-core/CVE-2020-13936) (#3205)
• See the full listing of changes.