v1.14.2 v0.5.0

high risk

inboundemail/inboundAug 13, 2026 → Aug 14, 20260 days between releases

What's New

Older release hardened PDF parsing; newer release added async web scanning and Rust backends.

New Features

  • Async scanning is now the default runtime
  • Rust native backend available for GET scans
  • Category-based wordlists and template placeholders
  • New MySQL and PostgreSQL report formats
  • JSON-based resumable sessions using controller state

Improvements

  • Caps Form XObject expansion and CID ranges to prevent crafted PDFs from forcing unbounded resource usage
  • Advanced match/filter controls for status, size, and elapsed time
  • Wildcard and duplicate-result filtering improved
  • Async pause/stop handling, SSL error classification, and proxy handling improved
  • Python support now targets Python 3.11-3.14

Bug Fixes

  • Async pause/stop handling fixed
  • SSL error classification fixed
  • Proxy handling improved
  • IPv6 handling fixed
  • Encoded URL edge cases fixed

Upgrade Notes

The runtime has shifted from synchronous PDF parsing to asynchronous web scanning. Python target versions are now 3.11-3.14, with legacy threaded stacks available via `--sync`. Rust backends are supported for native wordlist generation.

The Two Releases

v1.14.2

1.14.2 — Hardened parsing for pathological PDFs

Aug 13, 2026· 2 months ago

Hardens the parser against pathological PDFs by capping expansion limits on various resources and operators to prevent unbounded CPU or memory usage.

Full release notes
v0.5.0

dirsearch v0.5.0

Aug 14, 2026· 2 months ago

Introduces async scanning by default, Rust native backend, improved wordlists, new database report formats, and enhanced security.

Full release notes