# Kubescape v4.0.19

> Security · 2026-11-05

A maintenance release with dependency updates and correctness fixes. It also enforces workspace and scan-input constraints that may require operator changes.

## Action needed
- **[breaking]** Download argument validation
  - The `download` command now rejects extraneous positional arguments, with enhanced test coverage.

## Check if affected
- **[breaking]** Workspace boundary containment for local IaC scans
  - Applies if you use local IaC scans.
  - The `mcpserver` now enforces workspace boundary containment for local IaC scans.
- **[breaking]** `--file-path` conflict validation
  - Applies if you use positional paths with framework and control scans.
  - Framework and control scans now reject conflicting use of the `--file-path` flag and positional paths.

## Other recorded changes
- 13 (value_changed 7, defect_corrected 6)

[Full analysis](https://ratatosk.io/en/releases/kubescape/v4.0.19)

[Original release notes](https://github.com/kubescape/kubescape/releases/tag/v4.0.19)