Releases — RATATOSK

Kubescapev4.0.9SecurityMay 29, 2026

ACTION 3CHECK 3OTHER 105View full analysis

A broad maintenance release with correctness fixes, new CLI and reporting capabilities, anonymization updates, a performance improvement, added validation, and dependency refreshes. It also includes security fixes alongside changes to output and push defaults.

Action needed (3)

securityDependency updates for security advisories
Dependencies are updated to address security advisories.
securityEnvFrom clearing in container data removal
removeContainersData now clears EnvFrom to prevent secret name leakage.
securityEnv[].ValueFrom clearing in container data removal
removeContainersData and removeEphemeralContainersData now clear Env[].ValueFrom.

Check if affected (3)

security/v1/results access control hardening
Applies if you use /v1/results.
The /v1/results endpoint is hardened to remediate IDOR.
breakingThe pdf/html output default changed to file output
Applies if you use pdf/html output.
The default for pdf/html output now writes to a file instead of stdout.
breakingThe push default changed to opt-in
Applies if you use push.
The default for push is now false, so opting in is required.

Source ↗