Node API runtime release notesRSS

Fixes

• Scrubs HAR entry cookie values

New Features

• Shows the customer's website's daysUntilExpiration in the Synthetic Event for Cert Check monitors.

Fixes

• Masks sensitive header values in HAR log

Features

• Added the formdata-node and async modules.
• Added support to release Next Gen Broken Links and Cert Checks

Fixes

• Yarn version update

Security patches

• CVEs related to node-gyp, ssh2-sftp-client, urllib, follow-redirects, and ip

Fixes

• Fixes for future releases of Broken Links monitors and Cert Check monitors
• Re-upgrades SSL-Checker package which was inadvertently downgraded, causing errors for customers

Security patches

• CWE-1333

Fixes

• Reduces Polling frequency for successful requests while in Kubernetes clusters.

Security patches

• CVE-2023-26159
• CWE-1321

New Features

• Adds support for future release of Cert Check monitors.
• Adds support for future release of Broken Links monitors.

Security patches

• CWE-1333

Fixes

• Removes write access to unnecessary paths
• Prevents Node Qualified paths from bypassing the deny/shim logic in the require wall.
• Removes access to the ‘module’ module

Security patches

• CWE-772
• Denys the use of VM
• Filters Bearer tokens and NR API keys from results.