Release Notes - 1.1

  • 1.1.4-funcrel
    This release embeds Highlight Agent version 5.12.7.
    Crash during application-level analysis, and CloudBlocker & GreenPattern results are not saved to KB. 📝 59087
    Fixes a vulnerability detected in Highlight Agent 5.12.0 (CVE-2026-33870).
  • 1.1.3-funcrel
    Fixes a regression introduced in 1.1.0-funcrel related to com.castsoftware.perl.runtime and causing analyses to fail with the error “missing perl library: XML::LibXML” when running analyses in a Linux environment (Docker).
  • 1.1.2-funcrel
    Fixed an issue where the extension was not functioning with CAST AIP 8.3.x because of new syntax not supported in Python 3.4 (which is used by 8.3.x). The extension now supports the older Python runtime correctly. 📝 58648
  • 1.1.1-funcrel
    This release forces the use of com.castsoftware.perl.runtime.1.1.0, thus fixing the vulnerabilities identified in com.castsoftware.perl.runtime.1.0.4 (CVE-2024 and CVE-2025).
  • 1.1.0-funcrel
    The Highlight Agent embedded in the extension can now be configured via an XML file (“highlight.configuration.xml”) to be put at the root of the source folder to be analyzed. Another configuration file containing the default parameter values is provided in the extension folder, and can be used as a template to write the one in the source folder. The file located in the source folder overrides the parameters of the file in the extension folder. For each parameter description, please refer to Highlight command-line documentation (https://doc.casthighlight.com/product-tutorials-third-party-tools/automated-code-scan-command-line/) external link. See also the extension documentation.