Release Radar

Release Notes

Codename: "Febrer Deams" Version: 6.2.0 Previous: 6.1.8 AbiDiff: 110-132 (22) Commits: 503 Contributors: 25

curl -Ls https://github.com/radareorg/radare2/releases/download/6.2.0/radare2-6.2.0.tar.xz | tar xJv
radare2-6.2.0/sys/install.sh

Highlights

See release notes and version history for ATT&CK here

What's Changed

🎉 New Features

• Added shodanct passive source by @dogancanbakir in https://github.com/projectdiscovery/subfinder/pull/1796
• Added Option -vR, -virustotal-res for VirusTotal source by @Bundy01 in https://github.com/projectdiscovery/subfinder/pull/1719
• Added machine-readable source listing with -ls -oJ by @Gerijacki in https://github.com/projectdiscovery/subfinder/pull/1812

🐞 Bug Fixes

• Fixed source leaks by @Mzack9999 in https://github.com/projectdiscovery/subfinder/pull/1801
• Fixed drain source channels on cancel so source goroutines exit instead of leaking on a blocked send by @Mzack9999 in https://github.com/projectdiscovery/subfinder/pull/1799
• Fixed crtsh's query by dropping unused certificate metadata from SQL query by @ChrisJr404 i...

What's Changed

🎉 New Features

• Added Context field to Options for external lifecycle control by @idanavishai in https://github.com/projectdiscovery/katana/pull/1593
• Added secrets extractor to knowledgebase by @dogancanbakir in https://github.com/projectdiscovery/katana/pull/1667
• Added endpoints extractor to knowledgebase by @dogancanbakir in https://github.com/projectdiscovery/katana/pull/1669
• Added callbacks to headless engine by @evanrolfe in https://github.com/projectdiscovery/katana/pull/1662
• Added content similarity detection / deduplication by @geeknik in https://github.com/projectdiscovery/katana/pull/915

🐞 Bug Fixes

• Fixed require label boundary for rdn scope to block look-alike domains by @Mubashirrrr in https://github.com/projectdiscovery/katana...

Changelog

• 1a4446f Add cis benchmark for rh-1.9 (#2103)
• 1699971 Added CIS benchmarks for rke2-cis-1.9 (#2099)
• cd5ce79 build(deps): bump alpine from 3.23.4 to 3.24.1 (#2117)
• 73ef8ea build(deps): bump github.com/aws/aws-sdk-go-v2/service/securityhub (#2090)
• 7c04cc6 build(deps): bump github.com/fatih/color from 1.18.0 to 1.19.0 (#2068)
• 8c01483 build(deps): bump golang from 1.26.3 to 1.26.4 (#2110)
• e943fe3 build(deps): bump golang from 1.26.4 to 1.26.5 (#2121)
• 1a2d5a7 build(deps): bump golang.org/x/net from 0.47.0 to 0.55.0 (#2118)
• f5efd65 build(deps): bump k8s.io/client-go from 0.35.2 to 0.36.3 (#2088)
• a73ce37 ci: pin GitHub Actions to immutable commit hashes (#2106)
• 2dc17e7 fix(rke2-cis-1.8): align CIS checks with RKE2 behavior (#2123)
• 0241de8 fix: CVE-2026-46600 (#...

2.0.4

August 04, 2026

BREAKING CHANGES:

• containers: The following packages have been removed from UBI based container images: gnupg, openssl, procps.

SECURITY:

• acl: Fix privilege-escalation vulnerability where a denied_parameters constraint on the policies request field could be bypassed by submitting a mixed-case policy name (e.g. "Super-Admin" instead of "super-admin"). Vault now normalizes the policies parameter to lowercase before evaluating allowed_parameters/denied_parameters constraints.
• identity/scim (enterprise): The identity/entity/merge endpoint now rejects requests that involve any SCIM-managed entity, preventing privileged operators from bypassing SCIM ownership guardrails to transfer aliases, group memberships, or policies across SCIM b...

Bug Fix

• terraform: handle null container_properties in aws_batch_job_def… - #7636