v1.3.5 v2.16.0
tobychui/zoraxyAug 22, 2026 → Aug 22, 20260 days between releases
What's New
Newer release is from a different repository (Subfinder) than the older release (Zoraxy); Subfinder adds scanmalware source and fixes pagination/security issues.
New Features
- scanmalware passive source
Improvements
- Pagination now honors the -max-results flag across all sources
- Domain extraction now matches targets literally to reject partial hosts
- Response bodies from untrusted sources are now capped to prevent DoS
- Deprecated Dial method replaced with DialContext
Bug Fixes
- CRTSH SQL query statement timeout fix to avoid PgBouncer handshake rejection
- Pagination fix to honor -max-results
- Domain extraction fix to match targets literally
- Response body size limit cap
- Dial method usage fix
Upgrade Notes
The provided 'newer' release notes are for the Subfinder project, not Zoraxy. If upgrading Subfinder v2.16.0, ensure the `-max-results` flag now works across all paginating sources and verify domain extraction accuracy.
The Two Releases
v1.3.5
Aug 22, 2026· 2 months ago
This release significantly expands the AI provider ecosystem by adding MiniMax, Fish Audio, Anthropic Claude, and new video sources, while introducing reusable WebUI settings and robust security measures like API key authentication.
Full release notesv2.16.0
Aug 22, 2026· 2 months ago
Subfinder v2.16.0 introduces a passive malware scan source and fixes critical pagination and security issues across multiple sub-scrapers.
Full release notes