[
  {
    "artifact_id": "native-node",
    "version": "0.25.3",
    "line": "0.x",
    "date": "2026-06-22",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0253-2026-06-22",
    "body_markdown": "#### All-in-one installer\n\n* Improved [MCP (Model Context Protocol)](../../api-discovery/exploring.md#mcp-servers) traffic analysis logging — the Node no longer produces excessive log output when there is no MCP traffic\n* Changed the [Limit data export](../admin-en/export-to-cloud.md) rule — when applied, the node now preserves the request structure (parameter names and nesting) and masks only the values, instead of switching the matched traffic to metadata only\n\n#### Helm chart\n\n* Improved [MCP (Model Context Protocol)](../../api-discovery/exploring.md#mcp-servers) traffic analysis logging — the Node no longer produces excessive log output when there is no MCP traffic\n* Changed the [Limit data export](../admin-en/export-to-cloud.md) rule — when applied, the node now preserves the request structure (parameter names and nesting) and masks only the values, instead of switching the matched traffic to metadata only\n* Fixed security vulnerabilities: [CVE-2026-34182](https://nvd.nist.gov/vuln/detail/CVE-2026-34182), [CVE-2026-45447](https://nvd.nist.gov/vuln/detail/CVE-2026-45447), [CVE-2026-7383](https://nvd.nist.gov/vuln/detail/CVE-2026-7383), [CVE-2026-9076](https://nvd.nist.gov/vuln/detail/CVE-2026-9076), [CVE-2026-45445](https://nvd.nist.gov/vuln/detail/CVE-2026-45445), [CVE-2026-42764](https://nvd.nist.gov/vuln/detail/CVE-2026-42764), [CVE-2026-34183](https://nvd.nist.gov/vuln/detail/CVE-2026-34183), [CVE-2026-34180](https://nvd.nist.gov/vuln/detail/CVE-2026-34180), [CVE-2026-34181](https://nvd.nist.gov/vuln/detail/CVE-2026-34181)\n\n#### Docker image\n\n* Improved [MCP (Model Context Protocol)](../../api-discovery/exploring.md#mcp-servers) traffic analysis logging — the Node no longer produces excessive log output when there is no MCP traffic\n* Changed the [Limit data export](../admin-en/export-to-cloud.md) rule — when applied, the node now preserves the request structure (parameter names and nesting) and masks only the values, instead of switching the matched traffic to metadata only\n* Fixed security vulnerabilities: [CVE-2026-34182](https://nvd.nist.gov/vuln/detail/CVE-2026-34182), [CVE-2026-45447](https://nvd.nist.gov/vuln/detail/CVE-2026-45447), [CVE-2026-7383](https://nvd.nist.gov/vuln/detail/CVE-2026-7383), [CVE-2026-9076](https://nvd.nist.gov/vuln/detail/CVE-2026-9076), [CVE-2026-45445](https://nvd.nist.gov/vuln/detail/CVE-2026-45445), [CVE-2026-42764](https://nvd.nist.gov/vuln/detail/CVE-2026-42764), [CVE-2026-34183](https://nvd.nist.gov/vuln/detail/CVE-2026-34183), [CVE-2026-34180](https://nvd.nist.gov/vuln/detail/CVE-2026-34180), [CVE-2026-34181](https://nvd.nist.gov/vuln/detail/CVE-2026-34181)"
  },
  {
    "artifact_id": "native-node",
    "version": "0.25.2",
    "line": "0.x",
    "date": "2026-06-05",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0252-2026-06-05",
    "body_markdown": "#### All-in-one installer\n\n* Fixed issues with caching MCP schemas for schema enforcement\n\n#### Helm chart\n\n* Fixed issues with caching MCP schemas for schema enforcement\n\n#### Docker image\n\n* Fixed issues with caching MCP schemas for schema enforcement"
  },
  {
    "artifact_id": "native-node",
    "version": "0.25.1",
    "line": "0.x",
    "date": "2026-05-21",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0251-2026-05-21",
    "body_markdown": "#### All-in-one installer\n\n* Added the [`http_inspector.wmcp_enabled`](../../installation/native-node/all-in-one-conf.md#http_inspectorwmcp_enabled) configuration parameter (default `true`) that lets you opt out of MCP traffic analysis even when it would otherwise be enabled automatically by your Wallarm subscription\n* Added [`connector.app_reply_timeout`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout) and [`connector.app_reply_timeout_code`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout_code) configuration parameters that enforce a hard time-based cut-off on request handling in `connector-server` mode. Use them when the upstream caller (for example, an API gateway) requires a strict response budget per request\n* Fixed an issue where MCP session locations were not invalidated on configuration reload, causing stale entries to persist after reconfiguration\n* Fixed an issue where attack requests were silently dropped from the export pipeline when `acl.enabled: false` was set, breaking attack reporting in deployments with ACL disabled\n* Bumped Go version to 1.26.3\n* Fixed security vulnerabilities:\n\n    * [CVE-2026-42499](https://nvd.nist.gov/vuln/detail/CVE-2026-42499)\n    * [CVE-2026-39836](https://nvd.nist.gov/vuln/detail/CVE-2026-39836)\n    * [CVE-2026-39820](https://nvd.nist.gov/vuln/detail/CVE-2026-39820)\n    * [CVE-2026-33814](https://nvd.nist.gov/vuln/detail/CVE-2026-33814)\n    * [CVE-2026-33811](https://nvd.nist.gov/vuln/detail/CVE-2026-33811)\n    * [CVE-2026-44432](https://nvd.nist.gov/vuln/detail/CVE-2026-44432)\n    * [CVE-2026-44431](https://nvd.nist.gov/vuln/detail/CVE-2026-44431)\n\n#### Helm chart\n\n* Fixed an issue where MCP session locations were not invalidated on configuration reload, causing stale entries to persist after reconfiguration\n* Fixed an issue where attack requests were silently dropped from the export pipeline when `acl.enabled: false` was set, breaking attack reporting in deployments with ACL disabled\n* Bumped Go version to 1.26.3\n* Fixed security vulnerabilities:\n\n    * [CVE-2026-42499](https://nvd.nist.gov/vuln/detail/CVE-2026-42499)\n    * [CVE-2026-39836](https://nvd.nist.gov/vuln/detail/CVE-2026-39836)\n    * [CVE-2026-39820](https://nvd.nist.gov/vuln/detail/CVE-2026-39820)\n    * [CVE-2026-33814](https://nvd.nist.gov/vuln/detail/CVE-2026-33814)\n    * [CVE-2026-33811](https://nvd.nist.gov/vuln/detail/CVE-2026-33811)\n\n#### Docker image\n\n* Added the [`http_inspector.wmcp_enabled`](../../installation/native-node/all-in-one-conf.md#http_inspectorwmcp_enabled) configuration parameter (default `true`) that lets you opt out of MCP traffic analysis even when it would otherwise be enabled automatically by your Wallarm subscription\n* Added [`connector.app_reply_timeout`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout) and [`connector.app_reply_timeout_code`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout_code) configuration parameters that enforce a hard time-based cut-off on request handling in `connector-server` mode. Use them when the upstream caller (for example, an API gateway) requires a strict response budget per request\n* Fixed an issue where MCP session locations were not invalidated on configuration reload, causing stale entries to persist after reconfiguration\n* Fixed an issue where attack requests were silently dropped from the export pipeline when `acl.enabled: false` was set, breaking attack reporting in deployments with ACL disabled\n* Bumped Go version to 1.26.3\n* Fixed security vulnerabilities:\n\n    * [CVE-2026-42499](https://nvd.nist.gov/vuln/detail/CVE-2026-42499)\n    * [CVE-2026-39836](https://nvd.nist.gov/vuln/detail/CVE-2026-39836)\n    * [CVE-2026-39820](https://nvd.nist.gov/vuln/detail/CVE-2026-39820)\n    * [CVE-2026-33814](https://nvd.nist.gov/vuln/detail/CVE-2026-33814)\n    * [CVE-2026-33811](https://nvd.nist.gov/vuln/detail/CVE-2026-33811)\n    * [CVE-2026-44432](https://nvd.nist.gov/vuln/detail/CVE-2026-44432)\n    * [CVE-2026-44431](https://nvd.nist.gov/vuln/detail/CVE-2026-44431)"
  },
  {
    "artifact_id": "native-node",
    "version": "0.22.2",
    "line": "0.x",
    "date": "2026-05-08",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0222-2026-05-08",
    "body_markdown": "#### All-in-one installer\n\n* Added [`connector.app_reply_timeout`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout) and [`connector.app_reply_timeout_code`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout_code) configuration parameters that enforce a hard time-based cut-off on request handling in `connector-server` mode. Use them when the upstream caller (for example, an API gateway) requires a strict response budget per request\n\n#### Docker image\n\n* Added [`connector.app_reply_timeout`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout) and [`connector.app_reply_timeout_code`](../../installation/native-node/all-in-one-conf.md#connectorapp_reply_timeout_code) configuration parameters that enforce a hard time-based cut-off on request handling in `connector-server` mode. Use them when the upstream caller (for example, an API gateway) requires a strict response budget per request"
  },
  {
    "artifact_id": "native-node",
    "version": "0.25.0",
    "line": "0.x",
    "date": "2026-05-04",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0250-2026-05-04",
    "body_markdown": "#### All-in-one installer\n\n* Added support for [MCP server discovery](../../api-discovery/exploring.md#mcp-servers) in API Discovery\n* Added support for [MCP Sessions](../../api-sessions/mcp-sessions.md)\n* Added [MCP mitigation controls](../../agentic-ai/mcp-mitigation-controls.md): ACL policy, request verification, and tool input schema enforcement\n* Added HEX encoding attack detection — the Node now decodes and analyzes HEX-encoded payloads, improving protection against obfuscation-based bypass techniques\n* Fixed [API Specification Enforcement](../api-specification-enforcement/overview.md) incorrectly reporting requests as \"undefined endpoint\" for OpenAPI specs that define a base path in the `servers` block\n\n#### Helm chart\n\n* Added support for [MCP server discovery](../../api-discovery/exploring.md#mcp-servers) in API Discovery\n* Added support for [MCP Sessions](../../api-sessions/mcp-sessions.md)\n* Added [MCP mitigation controls](../../agentic-ai/mcp-mitigation-controls.md): ACL policy, request verification, and tool input schema enforcement\n* Added HEX encoding attack detection — the Node now decodes and analyzes HEX-encoded payloads, improving protection against obfuscation-based bypass techniques\n* Fixed [API Specification Enforcement](../api-specification-enforcement/overview.md) incorrectly reporting requests as \"undefined endpoint\" for OpenAPI specs that define a base path in the `servers` block\n\n#### Docker image\n\n* Added support for [MCP server discovery](../../api-discovery/exploring.md#mcp-servers) in API Discovery\n* Added support for [MCP Sessions](../../api-sessions/mcp-sessions.md)\n* Added [MCP mitigation controls](../../agentic-ai/mcp-mitigation-controls.md): ACL policy, request verification, and tool input schema enforcement\n* Added HEX encoding attack detection — the Node now decodes and analyzes HEX-encoded payloads, improving protection against obfuscation-based bypass techniques\n* Fixed [API Specification Enforcement](../api-specification-enforcement/overview.md) incorrectly reporting requests as \"undefined endpoint\" for OpenAPI specs that define a base path in the `servers` block"
  },
  {
    "artifact_id": "native-node",
    "version": "0.24.1",
    "line": "0.x",
    "date": "2026-04-27",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0241-2026-04-27",
    "body_markdown": "#### All-in-one installer\n\n* Added the [`metrics.per_host_stats`](../../installation/native-node/all-in-one-conf.md#metricsper_host_stats) configuration parameter to control per-host metrics collection (enabled by default)\n* Bumped Go version to 1.26.2\n* Fixed intermittent errors in custom ruleset loading and GraphQL processing\n* Fixed occasional panic in [`tcp-capture-v2`](../../installation/oob/tcp-traffic-mirror/deployment.md) mode\n\n#### Helm chart\n\n* Bumped Go version to 1.26.2\n* Fixed intermittent errors in custom ruleset loading and GraphQL processing\n\n#### Docker image\n\n* Added the [`metrics.per_host_stats`](../../installation/native-node/all-in-one-conf.md#metricsper_host_stats) configuration parameter to control per-host metrics collection (enabled by default)\n* Bumped Go version to 1.26.2\n* Fixed intermittent errors in custom ruleset loading and GraphQL processing"
  },
  {
    "artifact_id": "native-node",
    "version": "0.24.0",
    "line": "0.x",
    "date": "2026-04-06",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0240-2026-04-06",
    "body_markdown": "#### All-in-one installer\n\n* Added [authentication flow detection](../../api-discovery/authentication.md) in API Discovery — automatically identifies authentication methods used by each endpoint and highlights unauthenticated endpoints\n* [TCP traffic mirror analysis](../../installation/oob/tcp-traffic-mirror/deployment.md) (`tcp-capture-v2` mode):\n\n    * Added support for [VXLAN](../../installation/oob/tcp-traffic-mirror/deployment.md#vxlan) and [GENEVE](../../installation/oob/tcp-traffic-mirror/deployment.md#geneve) decapsulation, including automatic support for [AWS VPC Traffic Mirroring](https://docs.aws.amazon.com/vpc/latest/mirroring/what-is-traffic-mirroring.html) (GENEVE with nested VXLAN)\n    * Added new configuration parameters: [`tcp_stream.from_vxlan`](../../installation/native-node/all-in-one-conf.md#tcp_streamfrom_vxlan) and [`tcp_stream.from_geneve`](../../installation/native-node/all-in-one-conf.md#tcp_streamfrom_geneve) for receiving encapsulated mirrored traffic\n    * Fixed issues that caused missing and unanalyzed requests, incorrect response-to-request association, and VLAN ID mishandling\n    * Fixed incorrect reassembly of interlaced packets captured from multiple interfaces in promiscuous mode\n* Changed default [`log.proton_log_mask`](../../installation/native-node/all-in-one-conf.md#logproton_log_mask) from `info@*` to `info+@*` to show warning and error messages from the traffic analysis engine (previously only info-level messages were displayed)\n* Changed default [`http_inspector.shm_dir`](../../installation/native-node/all-in-one-conf.md#http_inspectorshm_dir) from `/tmp` to `/opt/wallarm/shm` for better compatibility with containerized environments\n* Fixed [API Specification Enforcement](../../api-specification-enforcement/overview.md) not triggering [specification processing overlimit](../../api-specification-enforcement/viewing-events.md#overlimit-events) events for requests exceeding size or time limits\n* Updated [Prometheus metrics](../../admin-en/native-node-metrics-gonode.md):\n\n    | Change | Metric |\n    |--------|--------|\n    | New | `wallarm_gonode_tcp_stream_input_packets_total{source=…}` |\n    | New | `wallarm_gonode_tcp_stream_input_bytes_total{source=…}` |\n    | New | `wallarm_gonode_tcp_stream_output_packets_total` |\n    | New | `wallarm_gonode_tcp_stream_output_bytes_total` |\n    | New | `wallarm_gonode_tcp_stream_packets_rejected_total{reason=…}` |\n    | New | `wallarm_gonode_tcp_stream_bytes_rejected_total{reason=…}` |\n    | New | `wallarm_gonode_tcp_reassembler_http_decode_bytes_decoded_total` |\n    | New | `wallarm_gonode_tcp_reassembler_http_flow_bytes_rejected_total` |\n    | New | `wallarm_gonode_tcp_reassembler_container_is_overloaded` |\n    | New | `wallarm_gonode_tcp_reassembler_http_unpaired_messages` |\n    | New | `wallarm_gonode_tcp_stream_diag_interface_counters_total` |\n    | New | `wallarm_gonode_tcp_stream_errors_total` (Geneve/VXLAN error types) |\n    | New | `wallarm_gonode_envoy_external_filter_requests_blocked_total` |\n    | Changed | `wallarm_gonode_tcp_stream_diag_interface_info` — now only reports MTU; I/O counters moved to `diag_interface_counters_total` |\n    | Changed | Per-host metrics (`*_per_host_total`) — `host` label is now validated, normalized to lowercase; invalid/oversized values bucketed under `__invalid_host__` |\n    | Renamed | `…errors_total{type=\"ResponseBeforeRequest\"}` → `…{type=\"ResponseReadyBeforeRequest\"}` |\n    | Removed | `wallarm_gonode_tcp_stream_tcp_packets_read_total` |\n    | Removed | `wallarm_gonode_http_connector_server_errors_total{type=\"MsgType\"}` |\n\n* Fixed minor stability and reliability issues\n\n#### Helm chart\n\n* Added [authentication flow detection](../../api-discovery/authentication.md) in API Discovery — automatically identifies authentication methods used by each endpoint and highlights unauthenticated endpoints\n* Fixed [API Specification Enforcement](../../api-specification-enforcement/overview.md) not triggering [specification processing overlimit](../../api-specification-enforcement/viewing-events.md#overlimit-events) events for requests exceeding size or time limits\n* Updated [Prometheus metrics](../../admin-en/native-node-metrics-gonode.md):\n\n    | Change | Metric |\n    |--------|--------|\n    | New | `wallarm_gonode_envoy_external_filter_requests_blocked_total` |\n    | Changed | Per-host metrics (`*_per_host_total`) — `host` label is now validated, normalized to lowercase; invalid/oversized values bucketed under `__invalid_host__` |\n    | Renamed | `…errors_total{type=\"ResponseBeforeRequest\"}` → `…{type=\"ResponseReadyBeforeRequest\"}` |\n    | Removed | `wallarm_gonode_http_connector_server_errors_total{type=\"MsgType\"}` |\n\n* Fixed minor stability and reliability issues\n\n#### Docker image\n\n* Added [authentication flow detection](../../api-discovery/authentication.md) in API Discovery — automatically identifies authentication methods used by each endpoint and highlights unauthenticated endpoints\n* Changed default [`log.proton_log_mask`](../../installation/native-node/all-in-one-conf.md#logproton_log_mask) from `info@*` to `info+@*` to show warning and error messages from the traffic analysis engine (previously only info-level messages were displayed)\n* Changed default [`http_inspector.shm_dir`](../../installation/native-node/all-in-one-conf.md#http_inspectorshm_dir) from `/tmp` to `/opt/wallarm/shm` for better compatibility with containerized environments\n* Fixed [API Specification Enforcement](../../api-specification-enforcement/overview.md) not triggering [specification processing overlimit](../../api-specification-enforcement/viewing-events.md#overlimit-events) events for requests exceeding size or time limits\n* Updated [Prometheus metrics](../../admin-en/native-node-metrics-gonode.md):\n\n    | Change | Metric |\n    |--------|--------|\n    | New | `wallarm_gonode_envoy_external_filter_requests_blocked_total` |\n    | Changed | Per-host metrics (`*_per_host_total`) — `host` label is now validated, normalized to lowercase; invalid/oversized values bucketed under `__invalid_host__` |\n    | Renamed | `…errors_total{type=\"ResponseBeforeRequest\"}` → `…{type=\"ResponseReadyBeforeRequest\"}` |\n    | Removed | `wallarm_gonode_http_connector_server_errors_total{type=\"MsgType\"}` |\n\n* Fixed minor stability and reliability issues"
  },
  {
    "artifact_id": "native-node",
    "version": "0.23.2",
    "line": "0.x",
    "date": "2026-03-24",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0232-2026-03-24",
    "body_markdown": "#### All-in-one installer\n\n* Fixed the [GHSA-6g7g-w4f8-9c9x](https://github.com/advisories/GHSA-6g7g-w4f8-9c9x) vulnerability\n\n#### Helm chart\n\n* Fixed the [GHSA-6g7g-w4f8-9c9x](https://github.com/advisories/GHSA-6g7g-w4f8-9c9x) vulnerability\n\n#### Docker image\n\n* Fixed the [GHSA-6g7g-w4f8-9c9x](https://github.com/advisories/GHSA-6g7g-w4f8-9c9x) vulnerability"
  },
  {
    "artifact_id": "native-node",
    "version": "0.23.1",
    "line": "0.x",
    "date": "2026-03-19",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0231-2026-03-19",
    "body_markdown": "#### All-in-one installer\n\n* Fixed a memory leak in the [API Specification Enforcement](../../api-specification-enforcement/overview.md) component that caused steadily increasing memory consumption and eventual OOMKill pod restarts\n* Added new traffic metrics to the [`wallarm-status`](../../admin-en/configure-statistics-service.md) statistics service: `bytes_blocked_in`, `bytes_blocked_out`, `bytes_blocked_by_acl_in`, and `bytes_blocked_by_acl_out`\n\n    These counters track the volume of incoming and outgoing traffic in blocked requests, split by block reason (attack/overlimit/antibot vs. denylists). Available in JSON, Prometheus, and per-application split formats.\n* Bumped Go version to 1.26.1\n* Fixed a shared memory allocation bug in the statistics service initialization that could lead to data corruption under high load\n* Fixed memory limit handling for **wcli** jobs\n* Fixed security vulnerabilities:\n\n    * [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186)\n    * [CVE-2026-27137](https://nvd.nist.gov/vuln/detail/CVE-2026-27137)\n    * [CVE-2026-25679](https://nvd.nist.gov/vuln/detail/CVE-2026-25679)\n    * [CVE-2026-27141](https://nvd.nist.gov/vuln/detail/CVE-2026-27141)\n    * [CVE-2026-27142](https://nvd.nist.gov/vuln/detail/CVE-2026-27142)\n    * [CVE-2026-27138](https://nvd.nist.gov/vuln/detail/CVE-2026-27138)\n    * [CVE-2026-27139](https://nvd.nist.gov/vuln/detail/CVE-2026-27139)\n\n#### Helm chart\n\n* Fixed a memory leak in the [API Specification Enforcement](../../api-specification-enforcement/overview.md) component that caused steadily increasing memory consumption and eventual OOMKill pod restarts\n* Added new traffic metrics to the [`wallarm-status`](../../admin-en/configure-statistics-service.md) statistics service: `bytes_blocked_in`, `bytes_blocked_out`, `bytes_blocked_by_acl_in`, and `bytes_blocked_by_acl_out`\n\n    These counters track the volume of incoming and outgoing traffic in blocked requests, split by block reason (attack/overlimit/antibot vs. denylists). Available in JSON, Prometheus, and per-application split formats.\n* Bumped Go version to 1.26.1\n* Fixed a shared memory allocation bug in the statistics service initialization that could lead to data corruption under high load\n* Fixed memory limit handling for **wcli** jobs\n* Fixed security vulnerabilities:\n\n    * [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186)\n    * [CVE-2026-27137](https://nvd.nist.gov/vuln/detail/CVE-2026-27137)\n    * [CVE-2026-25679](https://nvd.nist.gov/vuln/detail/CVE-2026-25679)\n    * [CVE-2026-27141](https://nvd.nist.gov/vuln/detail/CVE-2026-27141)\n    * [CVE-2026-27142](https://nvd.nist.gov/vuln/detail/CVE-2026-27142)\n    * [CVE-2026-27138](https://nvd.nist.gov/vuln/detail/CVE-2026-27138)\n    * [CVE-2026-22184](https://nvd.nist.gov/vuln/detail/CVE-2026-22184)\n    * [CVE-2026-27171](https://nvd.nist.gov/vuln/detail/CVE-2026-27171)\n    * [CVE-2026-27139](https://nvd.nist.gov/vuln/detail/CVE-2026-27139)\n\n#### Docker image\n\n* Fixed a memory leak in the [API Specification Enforcement](../../api-specification-enforcement/overview.md) component that caused steadily increasing memory consumption and eventual OOMKill pod restarts\n* Added new traffic metrics to the [`wallarm-status`](../../admin-en/configure-statistics-service.md) statistics service: `bytes_blocked_in`, `bytes_blocked_out`, `bytes_blocked_by_acl_in`, and `bytes_blocked_by_acl_out`\n\n    These counters track the volume of incoming and outgoing traffic in blocked requests, split by block reason (attack/overlimit/antibot vs. denylists). Available in JSON, Prometheus, and per-application split formats.\n* Bumped Go version to 1.26.1\n* Fixed a shared memory allocation bug in the statistics service initialization that could lead to data corruption under high load\n* Fixed memory limit handling for **wcli** jobs\n* Fixed security vulnerabilities:\n\n    * [CVE-2026-33186](https://nvd.nist.gov/vuln/detail/CVE-2026-33186)\n    * [CVE-2026-27137](https://nvd.nist.gov/vuln/detail/CVE-2026-27137)\n    * [CVE-2026-25679](https://nvd.nist.gov/vuln/detail/CVE-2026-25679)\n    * [CVE-2026-27141](https://nvd.nist.gov/vuln/detail/CVE-2026-27141)\n    * [CVE-2026-24049](https://nvd.nist.gov/vuln/detail/CVE-2026-24049)\n    * [CVE-2026-27142](https://nvd.nist.gov/vuln/detail/CVE-2026-27142)\n    * [CVE-2026-27138](https://nvd.nist.gov/vuln/detail/CVE-2026-27138)\n    * [CVE-2026-22184](https://nvd.nist.gov/vuln/detail/CVE-2026-22184)\n    * [CVE-2026-27171](https://nvd.nist.gov/vuln/detail/CVE-2026-27171)\n    * [CVE-2026-27139](https://nvd.nist.gov/vuln/detail/CVE-2026-27139)"
  },
  {
    "artifact_id": "native-node",
    "version": "0.23.0",
    "line": "0.x",
    "date": "2026-02-24",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0230-2026-02-24",
    "body_markdown": "#### All-in-one installer\n\n* Added support for circular references in OpenAPI specifications uploaded for [API Specification Enforcement](../../api-specification-enforcement/overview.md)\n* Added support for OpenAPI v3 specifications with non-string (for example, integer) YAML keys in [API Specification Enforcement](../../api-specification-enforcement/overview.md). This improves compatibility and prevents schema parsing failures\n* Increased the frequency of session updates sent to the Wallarm Cloud. Sessions now appear in the UI faster, closer to real time\n* Improved memory usage monitoring and prevention of resource exhaustion\n* Added API token masking in Node logs to prevent sensitive data exposure\n* Fixed the [CVE-2026-21441](https://scout.docker.com/vulnerabilities/id/CVE-2026-21441) vulnerability\n* Fixed an issue where the Node sent too many requests in a single batch to **wstore**, causing submission failures\n* Fixed an issue where the installer script failed with the \"Incorrect config content for tcp-capture-v2 mode\" error when the [`mode`](../../installation/native-node/all-in-one-conf.md#mode-required) parameter value was quoted\n* Minor bug fixes and performance improvements\n\n#### Helm chart\n\n* Improved the Helm chart for high-availability deployments by adding pod disruption budgets, tuning resource settings, and introducing the [`topologySpreadConstraints`](https://kubernetes.io/docs/concepts/scheduling-eviction/topology-spread-constraints/) and [`startupProbe`](https://kubernetes.io/docs/concepts/configuration/liveness-readiness-startup-probes/#startup-probe) values\n* Added support for circular references in OpenAPI specifications uploaded for [API Specification Enforcement](../../api-specification-enforcement/overview.md)\n* Added support for OpenAPI v3 specifications with non-string (for example, integer) YAML keys in [API Specification Enforcement](../../api-specification-enforcement/overview.md). This improves compatibility and prevents schema parsing failures\n* Increased the frequency of session updates sent to the Wallarm Cloud. Sessions now appear in the UI faster, closer to real time\n* Improved memory usage monitoring and prevention of resource exhaustion\n* Added API token masking in Node logs to prevent sensitive data exposure\n* Fixed the [CVE-2026-21441](https://scout.docker.com/vulnerabilities/id/CVE-2026-21441) vulnerability\n* Fixed an issue where the Node sent too many requests in a single batch to **wstore**, causing submission failures\n* Minor bug fixes and performance improvements\n\n#### Docker image\n\n* Added support for circular references in OpenAPI specifications uploaded for [API Specification Enforcement](../../api-specification-enforcement/overview.md)\n* Added support for OpenAPI v3 specifications with non-string (for example, integer) YAML keys in [API Specification Enforcement](../../api-specification-enforcement/overview.md). This improves compatibility and prevents schema parsing failures\n* Increased the frequency of session updates sent to the Wallarm Cloud. Sessions now appear in the UI faster, closer to real time\n* Improved memory usage monitoring and prevention of resource exhaustion\n* Added API token masking in Node logs to prevent sensitive data exposure\n* Fixed the [CVE-2026-21441](https://scout.docker.com/vulnerabilities/id/CVE-2026-21441) vulnerability\n* Fixed an issue where the Node sent too many requests in a single batch to **wstore**, causing submission failures\n* Minor bug fixes and performance improvements"
  },
  {
    "artifact_id": "native-node",
    "version": "0.22.1",
    "line": "0.x",
    "date": "2026-02-03",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0221-2026-02-03",
    "body_markdown": "#### All-in-one installer\n\n* Fixed an issue where real IP header overrides were not applied when the header value contained an IP address with a port\n\n#### Helm chart\n\n* Fixed an issue where real IP header overrides were not applied when the header value contained an IP address with a port\n\n#### Docker image\n\n* Fixed an issue where real IP header overrides were not applied when the header value contained an IP address with a port"
  },
  {
    "artifact_id": "native-node",
    "version": "0.22.0",
    "line": "0.x",
    "date": "2025-12-23",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0220-2025-12-23",
    "body_markdown": "#### All-in-one installer\n\n* Added support for the [Gloo Gateway connector](../../installation/connectors/gloo.md)\n* Fixed the issue where integers were not being masked when using the [\"Mask sensitive data\" rule](../../user-guides/rules/sensitive-data-rule.md)\n* Fixed the issue where responses containing infoleak stamps were being blocked\n\n    Wallarm no longer blocks such responses, as doing so caused false detections and prevented rules from being edited\n* Fixed connector server waiting for the response data that is known to never arrive\n\n#### Helm chart\n\n* Added support for the [Gloo Gateway connector](../../installation/connectors/gloo.md)\n* Added support for Kong Ingress Controller connector 1.1.0 with new `inspect_response` and `inspect_response_body` [configuration parameters](../../installation/connectors/kong-ingress-controller.md#configuration-options)\n* Fixed the issue where integers were not being masked when using the [\"Mask sensitive data\" rule](../../user-guides/rules/sensitive-data-rule.md)\n* Fixed the issue where responses containing infoleak stamps were being blocked\n\n    Wallarm no longer blocks such responses, as doing so caused false detections and prevented rules from being edited\n* Fixed connector server waiting for the response data that is known to never arrive\n\n#### Docker image\n\n* Added support for the [Gloo Gateway connector](../../installation/connectors/gloo.md)\n* Fixed the issue where integers were not being masked when using the [\"Mask sensitive data\" rule](../../user-guides/rules/sensitive-data-rule.md)\n* Fixed the issue where responses containing infoleak stamps were being blocked\n\n    Wallarm no longer blocks such responses, as doing so caused false detections and prevented rules from being edited\n* Fixed connector server waiting for the response data that is known to never arrive"
  },
  {
    "artifact_id": "native-node",
    "version": "0.21.0",
    "line": "0.x",
    "date": "2025-12-17",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0210-2025-12-17",
    "body_markdown": "#### All-in-one installer\n\n* Added support for the [Amazon API Gateway connector](../../installation/connectors/aws-api-gateway.md)\n* Added the `client_uuid` label to all `*_per_app*` and `*_per_host*` [Prometheus metrics](../../admin-en/native-node-metrics-gonode.md) for Nodes running in multi-tenant mode\n* Fixed the issue where the [`wallarm_status` service statistics](../../admin-en/configure-statistics-service.md) contained the outdated `abnormal` metric, which was incorrectly increasing with each request\n\n    The metric and other outdated fields have been removed.\n* Fixed an issue where large or overlapping denylisted IP ranges were not being blocked in Security Edge-hosted environments\n\n#### Helm chart\n\n* Added support for the [Amazon API Gateway connector](../../installation/connectors/aws-api-gateway.md)\n* Added the `client_uuid` label to all `*_per_app*` and `*_per_host*` [Prometheus metrics](../../admin-en/native-node-metrics-gonode.md) for Nodes running in multi-tenant mode\n* Fixed the issue where the [`wallarm_status` service statistics](../../admin-en/configure-statistics-service.md) contained the outdated `abnormal` metric, which was incorrectly increasing with each request\n\n    The metric and other outdated fields have been removed.\n* Fixed an issue where large or overlapping denylisted IP ranges were not being blocked in Security Edge-hosted environments\n* Fixed the following vulnerabilities:\n    \n    * [CVE-2025-66418](https://nvd.nist.gov/vuln/detail/CVE-2025-66418)\n    * [CVE-2025-66471](https://nvd.nist.gov/vuln/detail/CVE-2025-66471)\n    * [CVE-2024-58251](https://nvd.nist.gov/vuln/detail/CVE-2024-58251)\n    * [CVE-2025-46394](https://nvd.nist.gov/vuln/detail/CVE-2025-46394)\n\n#### Docker image\n\n* Added support for the [Amazon API Gateway connector](../../installation/connectors/aws-api-gateway.md)\n* Added the `client_uuid` label to all `*_per_app*` and `*_per_host*` [Prometheus metrics](../../admin-en/native-node-metrics-gonode.md) for Nodes running in multi-tenant mode\n* Fixed the issue where the [`wallarm_status` service statistics](../../admin-en/configure-statistics-service.md) contained the outdated `abnormal` metric, which was incorrectly increasing with each request\n\n    The metric and other outdated fields have been removed.\n* Fixed an issue where large or overlapping denylisted IP ranges were not being blocked in Security Edge-hosted environments\n* Fixed the following vulnerabilities:\n\n    * [CVE-2025-66418](https://nvd.nist.gov/vuln/detail/CVE-2025-66418)\n    * [CVE-2025-66471](https://nvd.nist.gov/vuln/detail/CVE-2025-66471)\n    * [CVE-2024-58251](https://nvd.nist.gov/vuln/detail/CVE-2024-58251)\n    * [CVE-2025-46394](https://nvd.nist.gov/vuln/detail/CVE-2025-46394)"
  },
  {
    "artifact_id": "native-node",
    "version": "0.20.0",
    "line": "0.x",
    "date": "2025-11-25",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0200-2025-11-25",
    "body_markdown": "#### All-in-one installer\n\n* Introduced support for OpenAPI 3.1 in the [API Specification Enforcement](../../api-specification-enforcement/overview.md) feature — you can now upload specifications in version 3.1 format to compare traffic against them, identify mismatches, and mitigate related security risks\n* Added [Prometheus metrics support](../../admin-en/native-node-metrics-wstore.md) for the Postanalytics **wstore** component. The metrics are available by default at `http://localhost:9001/metrics` using the `tcp4` (IPv4-only) protocol\n\n    You can change the default metrics host, port, and protocol by setting the following environment variables when deploying the Node:\n\n    * `WALLARM_WSTORE__METRICS__LISTEN_ADDRESS` — defines the host and port\n    * `WALLARM_WSTORE__METRICS__PROTOCOL` — defines the protocol\n\n* Added [Prometheus metrics support](../../admin-en/native-node-metrics-gonode.md#wallarm_gonode_apifw_) for API Specification Enforcement service operation (based on the built-in API Firewall service). API Firewall metrics are included as part of the [`go-node` Prometheus metrics](../../admin-en/native-node-metrics.md)\n* Removed support for the deprecated `http_inspector.real_ip_header` configuration parameter\n* Improved Node initialization logs — added detailed information about component type, supported versions, error source, API endpoint, and Node UUID to simplify troubleshooting during the initialization stage\n* Fixed the [CVE-2025-58188](https://www.cve.org/CVERecord?id=CVE-2025-58188) vulnerability\n* Bug fixes:\n\n    * Fixed an issue where the Aggregation/**wcli** container could enter a crash loop due to an out-of-memory (OOM) condition\n    * Fixed an issue where the Node raised an error when a JWT token was sent in the `Authorization: Bearer` header\n    * Fixed invalid type error when editing automatically created rules for attacks detected in gRPC responses\n    * Fixed a race condition in out-of-band connectors, resolving the `FlowIsMissingRequest`, `FlowIsMissingResponse`, and occasional duplicate ID errors\n    * Fixed the issue where the `verdict` field in `go-node` access logs was occasionally missing, incorrectly formatted, and not JSON-compatible\n\n#### Helm chart\n\n* Introduced support for OpenAPI 3.1 in the [API Specification Enforcement](../../api-specification-enforcement/overview.md) feature — you can now upload specifications in version 3.1 format to compare traffic against them, identify mismatches, and mitigate related security risks\n* Added [Prometheus metrics support](../../admin-en/native-node-metrics-wstore.md) for the Postanalytics **wstore** component. The metrics are available by default at `http://localhost:9001/metrics` using the `tcp4` (IPv4-only) protocol\n\n    You can change the default metrics host, port, and protocol by setting the following in `values.yaml`:\n\n    * [`config.aggregation.metrics.listenAddress`](../../installation/native-node/helm-chart-conf.md#configaggregationmetricslistenaddress) — defines the host and port\n    * [`config.aggregation.metrics.protocol`](../../installation/native-node/helm-chart-conf.md#configaggregationmetricsprotocol) — defines the protocol\n\n* Added [Prometheus metrics support](../../admin-en/native-node-metrics-gonode.md#wallarm_gonode_apifw_) for API Specification Enforcement service operation (based on the built-in API Firewall service). API Firewall metrics are included as part of the [`go-node` Prometheus metrics](../../admin-en/native-node-metrics.md)\n* Improved Node initialization logs — added detailed information about component type, supported versions, error source, API endpoint, and Node UUID to simplify troubleshooting during the initialization stage\n* Switched to native HTTP readiness and liveness probes for the **wstore** component\n* Fixed the [CVE-2025-58188](https://www.cve.org/CVERecord?id=CVE-2025-58188) vulnerability\n* Bug fixes:\n\n    * Fixed an issue where the Aggregation/**wcli** container could enter a crash loop due to an out-of-memory (OOM) condition\n    * Fixed the issue where the Node raised an error when a JWT token was sent in the `Authorization: Bearer` header\n    * Fixed invalid type error when editing automatically created rules for attacks detected in gRPC responses\n    * Fixed a race condition in out-of-band connectors, resolving the `FlowIsMissingRequest`, `FlowIsMissingResponse`, and occasional duplicate ID errors\n    * Fixed the issue where the `verdict` field in `go-node` access logs was occasionally missing, incorrectly formatted, and not JSON-compatible\n\n#### Docker image\n\n* Introduced support for OpenAPI 3.1 in the [API Specification Enforcement](../../api-specification-enforcement/overview.md) feature — you can now upload specifications in version 3.1 format to compare traffic against them, identify mismatches, and mitigate related security risks\n* Added [Prometheus metrics support](../../admin-en/native-node-metrics-wstore.md) for the Postanalytics **wstore** component. The metrics are available by default at `http://localhost:9001/metrics` using the `tcp4` (IPv4-only) protocol\n\n    You can change the default metrics host, port, and protocol by setting the following environment variables when deploying the Node:\n\n    * `WALLARM_WSTORE__METRICS__LISTEN_ADDRESS` — defines the host and port\n    * `WALLARM_WSTORE__METRICS__PROTOCOL` — defines the protocol\n\n* Added [Prometheus metrics support](../../admin-en/native-node-metrics-gonode.md#wallarm_gonode_apifw_)for API Specification Enforcement service operation (based on the built-in API Firewall service). API Firewall metrics are included as part of the [`go-node` Prometheus metrics](../../admin-en/native-node-metrics.md)\n* Removed support for the deprecated `http_inspector.real_ip_header` configuration parameter\n* Improved Node initialization logs — added detailed information about component type, supported versions, error source, API endpoint, and Node UUID to simplify troubleshooting during the initialization stage\n* Fixed the [CVE-2025-58188](https://www.cve.org/CVERecord?id=CVE-2025-58188) vulnerability\n* Bug fixes:\n\n    * Fixed an issue where the Aggregation/**wcli** container could enter a crash loop due to an out-of-memory (OOM) condition\n    * Fixed an issue where the Node raised an error when a JWT token was sent in the `Authorization: Bearer` header\n    * Fixed invalid type error when editing automatically created rules for attacks detected in gRPC responses\n    * Fixed a race condition in out-of-band connectors, resolving the `FlowIsMissingRequest`, `FlowIsMissingResponse`, and occasional duplicate ID errors\n    * Fixed the issue where the `verdict` field in `go-node` access logs was occasionally missing, incorrectly formatted, and not JSON-compatible"
  },
  {
    "artifact_id": "native-node",
    "version": "0.19.0",
    "line": "0.x",
    "date": "2025-10-07",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0190-2025-10-07",
    "body_markdown": "#### All-in-one installer\n\n* Added support for [blocking attackers by API sessions](../../api-sessions/blocking.md)\n* Added [multitenancy support](../../installation/multi-tenant/overview.md)\n* Changed the default **wstore** binding to IPv4 (`tcp4`), it now listens only on IPv4 instead of dual‑stack\n\n    If your configuration uses `localhost` for **wstore**, update it to `127.0.0.1`.\n* Introduced protocol selection (tcp, tcp4, tcp6) using the `WALLARM_WSTORE__SERVICE__PROTOCOL` environment variable, which can be set in `/opt/wallarm/env.list`\n\n    The default value is `\"tcp4\"`.\n* Relaxed content-type validation in [API Specification Enforcement](../../api-specification-enforcement/overview.md): requests with image MIME types (`image/png`, `image/jpeg`, `image/gif`, `image/webp`, `image/avif`, `image/heic`, `image/heif`, `image/bmp`, `image/tiff`, `image/svg+xml`) are no longer rejected\n* Bumped Go version to 1.24\n* Bug fixes:\n\n    * Fixed an issue where the `go-node` process could segfault in production environments\n    * Fixed an issue where response context parameters configured in [API Sessions](../../api-sessions/setup.md) were not uploaded to the Wallarm Cloud\n    * Fixed an issue with incorrect [`remote_addr`](../../user-guides/rules/request-processing.md#ip-address-of-a-request-origin) parsing\n\n#### Helm chart\n\n* Added support for [blocking attackers by API sessions](../../api-sessions/blocking.md)\n* Added [multitenancy support](../../installation/multi-tenant/overview.md)\n* Changed the default **wstore** binding to IPv4 (`tcp4`), it now listens only on IPv4 instead of dual‑stack\n* Introduced the protocol selection (tcp, tcp4, tcp6) configuration parameter: [`config.aggregation.serviceProtocol`](../../installation/native-node/helm-chart-conf.md#configaggregationserviceprotocol) \n\n    The default value is `\"tcp4\"`.\n* Changed the default value of [config.aggregation.serviceAddress](../../installation/native-node/helm-chart-conf.md#configaggregationserviceaddress) to `0.0.0.0:3313`\n\n    This allows IPv4 traffic only. If you are using a custom value, make sure it matches the selected `config.aggregation.serviceProtocol`.    \n* Relaxed content-type validation in [API Specification Enforcement](../../api-specification-enforcement/overview.md): requests with image MIME types (`image/png`, `image/jpeg`, `image/gif`, `image/webp`, `image/avif`, `image/heic`, `image/heif`, `image/bmp`, `image/tiff`, `image/svg+xml`) are no longer rejected\n* Bumped Go version to 1.24\n* Set the default value for `config.connector.per_connection_limits.max_duration` to 1m (1 minute)\n* Bug fixes:\n\n    * Fixed an issue where the `go-node` process could segfault in production environments\n    * Fixed an issue where response context parameters configured in [API Sessions](../../api-sessions/setup.md) were not uploaded to the Wallarm Cloud\n    * Fixed an issue with incorrect [remote_addr](../../user-guides/rules/request-processing.md#ip-address-of-a-request-origin) parsing\n    * Fixed an issue where processing affinity was not applied correctly in the Native Node Helm chart\n\n#### Docker image\n\n* Added support for [blocking attackers by API sessions](../../api-sessions/blocking.md)\n* Added [multitenancy support](../../installation/multi-tenant/overview.md)\n* Changed the default **wstore** binding to IPv4 (`tcp4`), it now listens only on IPv4 instead of dual‑stack\n\n    If your configuration uses `localhost` for **wstore**, update it to `127.0.0.1`.\n* Introduced protocol selection (tcp, tcp4, tcp6) via the [`WALLARM_WSTORE__SERVICE__PROTOCOL`](../../installation/native-node/docker-image.md#4-run-the-docker-container) environment variable\n\n    The default value is `\"tcp4\"`.\n* Relaxed content-type validation in [API Specification Enforcement](../../api-specification-enforcement/overview.md): requests with image MIME types (`image/png`, `image/jpeg`, `image/gif`, `image/webp`, `image/avif`, `image/heic`, `image/heif`, `image/bmp`, `image/tiff`, `image/svg+xml`) are no longer rejected\n* Bumped Go version to 1.24\n* Bug fixes:\n\n    * Fixed an issue where the `go-node` process could segfault in production environments\n    * Fixed an issue where response context parameters configured in [API Sessions](../../api-sessions/setup.md) were not uploaded to the Wallarm Cloud    \n    * Fixed an issue with incorrect [remote_addr](../../user-guides/rules/request-processing.md#ip-address-of-a-request-origin) parsing"
  },
  {
    "artifact_id": "native-node",
    "version": "0.18.0",
    "line": "0.x",
    "date": "2025-09-17",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0180-2025-09-17",
    "body_markdown": "#### All-in-one installer\n\n* Added support for the [Azure API Management connector](../../installation/connectors/azure-api-management.md)\n* Added support for the [Apigee API Management connector](../../installation/connectors/apigee.md)\n* Updated Go version to 1.25\n* `http_inspector.workers: auto` now respects Kubernetes `cgroup` limits\n* Optimized mesh balancing logic for scale-up and scale-down events\n* Bug fixes:\n\n    * Fixed issue where the `go-node` process did not terminate correctly when stopped too early\n    * Fixed issue where the `go-node` process ignored failures of metrics/health-check/mesh listeners\n    * Fixed issue where `http_inspector` workers silently ignored ACL errors, addressing the most common source of these errors\n\n#### Helm chart\n\n* Added support for the [Azure API Management connector](../../installation/connectors/azure-api-management.md)\n* Added support for the [Apigee API Management connector](../../installation/connectors/apigee.md)\n* Updated Go version to 1.25\n* `http_inspector.workers: auto` now respects Kubernetes `cgroup` limits\n* Optimized mesh balancing logic for scale-up and scale-down events\n* Bug fixes:\n\n    * Fixed issue where the `go-node` process did not terminate correctly when stopped too early\n    * Fixed issue where the `go-node` process ignored failures of metrics/health-check/mesh listeners\n    * Fixed issue where `http_inspector` workers silently ignored ACL errors, addressing the most common source of these errors\n\n#### Docker image\n\n* Added support for the [Azure API Management connector](../../installation/connectors/azure-api-management.md)\n* Added support for the [Apigee API Management connector](../../installation/connectors/apigee.md)\n* Updated Go version to 1.25\n* `http_inspector.workers: auto` now respects Kubernetes `cgroup` limits\n* Optimized mesh balancing logic for scale-up and scale-down events\n* Bug fixes:\n\n    * Fixed issue where the `go-node` process did not terminate correctly when stopped too early\n    * Fixed issue where the `go-node` process ignored failures of metrics/health-check/mesh listeners\n    * Fixed issue where `http_inspector` workers silently ignored ACL errors, addressing the most common source of these errors"
  },
  {
    "artifact_id": "native-node",
    "version": "0.17.1",
    "line": "0.x",
    "date": "2025-08-15",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0171-2025-08-15",
    "body_markdown": "#### All-in-one installer\n\n* Fixed the stuffed credentials export to the Cloud\n* Improved GraphQL parser\n* Optimized the internal channel between the Node and wstore to increase throughput\n    \n    This prevents potential data loss when the Node ingests traffic faster than it can export it to postanalytics.\n* Fixed an issue where serialized requests without a source IP address failed to be exported to postanalytics\n* Bug fixes and internal improvements\n\n#### Helm chart\n\n* Introduced the [`proxy_headers`](../../installation/native-node/helm-chart-conf.md#configconnectorproxy_headers) configuration to configure trusted networks and extract real client IP and host headers\n* Fixed the stuffed credentials export to the Cloud\n* Improved GraphQL parser\n* Optimized the internal channel between the Node and wstore to increase throughput\n    \n    This prevents potential data loss when the Node ingests traffic faster than it can export it to postanalytics.\n* Fixed an issue where serialized requests without a source IP address failed to be exported to postanalytics\n* Bug fixes and internal improvements\n\n#### Docker image\n\n* Fixed the stuffed credentials export to the Cloud\n* Improved GraphQL parser\n* Optimized the internal channel between the Node and wstore to increase throughput\n    \n    This prevents potential data loss when the Node ingests traffic faster than it can export it to postanalytics.\n* Fixed an issue where serialized requests without a source IP address failed to be exported to postanalytics\n* Bug fixes and internal improvements"
  },
  {
    "artifact_id": "native-node",
    "version": "0.16.3",
    "line": "0.x",
    "date": "2025-08-05",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0163-2025-08-05",
    "body_markdown": "#### All-in-one installer\n\n* Added support for the [Akamai connector](../../installation/connectors/akamai-edgeworkers.md)\n* Fixed a silent failure when upgrading with the `--preserve` flag set to `true`\n\n#### Helm chart\n\n* Added support for the [Akamai connector](../../installation/connectors/akamai-edgeworkers.md)\n* Bug fixes\n\n#### Docker image\n\n* Added support for the [Akamai connector](../../installation/connectors/akamai-edgeworkers.md)\n* Fixed a silent failure when upgrading with the `--preserve` flag set to `true`"
  },
  {
    "artifact_id": "native-node",
    "version": "0.16.1",
    "line": "0.x",
    "date": "2025-08-01",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0161-2025-08-01",
    "body_markdown": "#### All-in-one installer\n\n* Added new [Prometheus metrics](../../admin-en/native-node-metrics.md):\n\n    * `wallarm_gonode_application_info` with the general Native Node instance information, e.g.:\n    \n        ```bash\n        wallarm_gonode_application_info{deployment_type=\"node-native-aio-installer\",mode=\"connector-server\",version=\"0.16.1\"} 1\n        ```\n    \n    * `wallarm_gonode_http_inspector_balancer_workers`\n    * `wallarm_gonode_http_inspector_debug_container_len` now includes `aggregate=\"sum\"` for `type=\"channel:in\"`\n    * `wallarm_gonode_http_inspector_errors_total` now includes a new `type=\"FlowTimeouts\"`\n* Improved stability in the internal `http_inspector` module\n\n#### Helm chart\n\n* Introduced the [`input_filters`](../../installation/native-node/helm-chart-conf.md#configconnectorinput_filters) configuration section, allowing you to define which requests should be inspected or bypassed by the Node\n* Added new [Prometheus metrics](../../admin-en/native-node-metrics.md):\n\n    * `wallarm_gonode_application_info` with the general Native Node instance information, e.g.:\n    \n        ```bash\n        wallarm_gonode_application_info{deployment_type=\"node-native-aio-installer\",mode=\"connector-server\",version=\"0.16.1\"} 1\n        ```\n    \n    * `wallarm_gonode_http_inspector_balancer_workers`\n    * `wallarm_gonode_http_inspector_debug_container_len` now includes `aggregate=\"sum\"` for `type=\"channel:in\"`\n    * `wallarm_gonode_http_inspector_errors_total` now includes a new `type=\"FlowTimeouts\"`\n* Deprecated the Wallarm Connector for [Istio that relied on a Lua plugin](/5.x/installation/connectors/istio/)\n\n    We recommend using the [gRPC-based external processing filter for Istio](../../installation/connectors/istio.md) instead.\n* For the deprecated Istio connector, the following improvements were made to ensure compatibility in existing deployments:\n\n    * Fixed mesh balancing logic for messages\n    * Added the `disable_mesh` parameter to process all connector traffic on the Node without mesh balancing (`false` by default - mesh balancing is enabled)\n* Improved stability in the internal `http_inspector` module\n\n#### Docker image\n\n* Added new [Prometheus metrics](../../admin-en/native-node-metrics.md):\n\n    * `wallarm_gonode_application_info` with the general Native Node instance information, e.g.:\n    \n        ```bash\n        wallarm_gonode_application_info{deployment_type=\"node-native-aio-installer\",mode=\"connector-server\",version=\"0.16.1\"} 1\n        ```\n    \n    * `wallarm_gonode_http_inspector_balancer_workers`\n    * `wallarm_gonode_http_inspector_debug_container_len` now includes `aggregate=\"sum\"` for `type=\"channel:in\"`\n    * `wallarm_gonode_http_inspector_errors_total` now includes a new `type=\"FlowTimeouts\"`\n* Improved stability in the internal `http_inspector` module"
  },
  {
    "artifact_id": "native-node",
    "version": "0.16.0",
    "line": "0.x",
    "date": "2025-07-23",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0160-2025-07-23",
    "body_markdown": "#### All-in-one installer\n\n* Added support for [file upload restriction policy](../../api-protection/file-upload-restriction.md) via mitigation controls\n* Added support for [unrestricted resource consumption](../../attacks-vulns-list.md#unrestricted-resource-consumption) mitigation by [API Abuse Prevention](../../api-abuse-prevention/overview.md)\n* Added support for the [MuleSoft Flex Gateway connector](../../installation/connectors/mulesoft-flex.md)\n* Introduced the [`input_filters`](../../installation/native-node/all-in-one-conf.md#input_filters) configuration section, allowing you to define which requests should be inspected or bypassed by the Node\n* Fixed memory leak\n* In rules, the separator used in [**xml_tag**](../../user-guides/rules/request-processing.md#xml) values that combine a URI, namespace, and tag name has been changed from `:` to `|`\n* Fixed blocking issue with denylisted origins and Wallarm Console UI-configured mode\n* Internal improvements\n\n#### Helm chart\n\n* Added support for [file upload restriction policy](../../api-protection/file-upload-restriction.md) via mitigation controls\n* Added support for [unrestricted resource consumption](../../attacks-vulns-list.md#unrestricted-resource-consumption) mitigation by [API Abuse Prevention](../../api-abuse-prevention/overview.md)\n* Added support for the [MuleSoft Flex Gateway connector](../../installation/connectors/mulesoft-flex.md)\n* Fixed memory leak\n* In rules, the separator used in [**xml_tag**](../../user-guides/rules/request-processing.md#xml) values that combine a URI, namespace, and tag name has been changed from `:` to `|`\n* Fixed blocking issue with denylisted origins and Wallarm Console UI-configured mode\n* Internal improvements\n\n#### Docker image\n\n* Added support for [file upload restriction policy](../../api-protection/file-upload-restriction.md) via mitigation controls\n* Added support for [unrestricted resource consumption](../../attacks-vulns-list.md#unrestricted-resource-consumption) mitigation by [API Abuse Prevention](../../api-abuse-prevention/overview.md)\n* Added support for the [MuleSoft Flex Gateway connector](../../installation/connectors/mulesoft-flex.md)\n* Introduced the [`input_filters`](../../installation/native-node/all-in-one-conf.md#input_filters) configuration section, allowing you to define which requests should be inspected or bypassed by the Node\n* Fixed memory leak\n* In rules, the separator used in [**xml_tag**](../../user-guides/rules/request-processing.md#xml) values that combine a URI, namespace, and tag name has been changed from `:` to `|`\n* Fixed blocking issue with denylisted origins and Wallarm Console UI-configured mode\n* Internal improvements"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.7",
    "line": "0.x",
    "date": "2025-07-23",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0137-2025-07-23",
    "body_markdown": "#### All-in-one installer\n\n* Introduced the [`input_filters`](../../installation/native-node/all-in-one-conf.md#input_filters) configuration section, allowing to define which requests should be inspected or bypassed by the Node\n* Fixed blocking issue with denylisted origins and Wallarm Console UI-configured mode\n\n#### Helm chart\n\n* Fixed blocking issue with denylisted origins and Wallarm Console UI-configured mode\n\n#### Docker image\n\n* Introduced the [`input_filters`](../../installation/native-node/all-in-one-conf.md#input_filters) configuration section, allowing to define which requests should be inspected or bypassed by the Node\n* Fixed blocking issue with denylisted origins and Wallarm Console UI-configured mode"
  },
  {
    "artifact_id": "native-node",
    "version": "0.15.1",
    "line": "0.x",
    "date": "2025-07-08",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0151-2025-07-08",
    "body_markdown": "#### All-in-one installer\n\n* Added support for [mitigation control-based](../../api-protection/graphql-rule.md#mitigation-control-based-protection) **GraphQL API Protection**\n* Introduced the [`proxy_headers`](../../installation/native-node/all-in-one-conf.md#proxy_headers) configuration to configure trusted networks and extract real client IP and host headers\n* Added the [`metrics.namespace`](../../installation/native-node/all-in-one-conf.md#metricsnamespace) configuration option to customize the prefix of Prometheus metrics exposed by the `go-node` binary\n* Fixed the `--preserve` script flag behavior to correctly retain the existing `node.yaml` and `env.list` files during upgrade\n\n    Previously, these files could be overwritten, resulting in loss of configuration.\n* Added [`connector.per_connection_limits`](../../installation/native-node/all-in-one-conf.md#connectorper_connection_limits) to control `keep-alive` connection limits\n* Minor internal file structure change\n* Fixed wstore ports binding: now bound to `127.0.0.1` instead of `0.0.0.0`\n* Fixed the [CVE-2025-22874](https://nvd.nist.gov/vuln/detail/CVE-2025-22874) vulnerability\n* Fixed the [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273) vulnerability\n\n#### Helm chart\n\n* Added support for [mitigation control-based](../../api-protection/graphql-rule.md#mitigation-control-based-protection) **GraphQL API Protection**\n* Added support for the [`config.aggregation.serviceAddress`](../../installation/native-node/helm-chart-conf.md#configaggregationserviceaddress) parameter to customize the address and port for incoming **wstore** connections\n* Minor internal file structure change\n* Fixed the [CVE-2025-22874](https://nvd.nist.gov/vuln/detail/CVE-2025-22874) vulnerability\n* Fixed the [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273) vulnerability\n\n#### Docker image\n\n* Added support for [mitigation control-based](../../api-protection/graphql-rule.md#mitigation-control-based-protection) **GraphQL API Protection**\n* Introduced the [`proxy_headers`](../../installation/native-node/all-in-one-conf.md#proxy_headers) configuration to configure trusted networks and extract real client IP and host headers\n* Added the [`metrics.namespace`](../../installation/native-node/all-in-one-conf.md#metricsnamespace) configuration option to customize the prefix of Prometheus metrics exposed by the `go-node` binary\n* Added [`connector.per_connection_limits`](../../installation/native-node/all-in-one-conf.md#connectorper_connection_limits) to control `keep-alive` connection limits\n* Minor internal file structure change\n* Fixed wstore ports binding: now bound to `127.0.0.1` instead of `0.0.0.0`\n* Fixed the [CVE-2025-22874](https://nvd.nist.gov/vuln/detail/CVE-2025-22874) vulnerability\n* Fixed the [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273) vulnerability"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.6",
    "line": "0.x",
    "date": "2025-07-08",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0136-2025-07-08",
    "body_markdown": "#### All-in-one installer\n\n* Fixed the [CVE-2025-22874](https://nvd.nist.gov/vuln/detail/CVE-2025-22874) vulnerability\n* Resolved an issue in [`proxy_headers`](../../installation/native-node/all-in-one-conf.md#proxy_headers) processing where headers from multiple records could be mixed for a single request\n    \n    Now, once a request matches a `trusted_networks` entry, only headers from that specific record are used.\n* Minor bug fixes\n\n#### Helm chart\n\n* Fixed the [CVE-2025-22874](https://nvd.nist.gov/vuln/detail/CVE-2025-22874) vulnerability\n* Minor bug fixes\n\n#### Docker image\n\n* Fixed the [CVE-2025-22874](https://nvd.nist.gov/vuln/detail/CVE-2025-22874) vulnerability\n* Resolved an issue in [`proxy_headers`](../../installation/native-node/all-in-one-conf.md#proxy_headers) processing where headers from multiple records could be mixed for a single request\n    \n    Now, once a request matches a `trusted_networks` entry, only headers from that specific record are used.\n* Minor bug fixes"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.5",
    "line": "0.x",
    "date": "2025-06-09",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0135-2025-06-09",
    "body_markdown": "#### All-in-one installer\n\n* Fixed the [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273) vulnerability\n* Removed support for the `WALLARM_ATTACKS_DETAILED_EXPORT` environment variable which has been used to disable exporting full attack data to Wallarm Cloud\n* Introduced the [`proxy_headers`](../../installation/native-node/all-in-one-conf.md#proxy_headers) configuration to configure trusted networks and extract real client IP and host headers\n\n    This replaces `http_inspector.real_ip_header` used in earlier versions in the `tcp-capture` mode.\n* Added the [`metrics.namespace`](../../installation/native-node/all-in-one-conf.md#metricsnamespace) configuration option to customize the prefix of Prometheus metrics exposed by the `go-node` binary\n\n#### Helm chart\n\n* Fixed the [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273) vulnerability\n\n#### Docker image\n\n* Fixed the [CVE-2025-47273](https://nvd.nist.gov/vuln/detail/CVE-2025-47273) vulnerability\n* Removed support for the `WALLARM_ATTACKS_DETAILED_EXPORT` environment variable which has been used to disable exporting full attack data to Wallarm Cloud\n* Introduced the [`proxy_headers`](../../installation/native-node/all-in-one-conf.md#proxy_headers) configuration to configure trusted networks and extract real client IP and host headers\n\n    This replaces `http_inspector.real_ip_header` used in earlier versions in the `tcp-capture` mode.\n* Added the [`metrics.namespace`](../../installation/native-node/all-in-one-conf.md#metricsnamespace) configuration option to customize the prefix of Prometheus metrics exposed by the `go-node` binary"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.4",
    "line": "0.x",
    "date": "2025-05-14",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0134-2025-05-14",
    "body_markdown": "#### All-in-one installer\n\n* Fixed the `--preserve` script flag behavior to correctly retain the existing `node.yaml` and `env.list` files during upgrade\n\n    Previously, these files could be overwritten, resulting in loss of configuration.\n* Added [`connector.per_connection_limits`](../../installation/native-node/all-in-one-conf.md#connectorper_connection_limits) to control `keep-alive` connection limits\n* Added support for the `WALLARM_ATTACKS_DETAILED_EXPORT` environment variable to optionally disable exporting full attack data to Wallarm Cloud\n\n    This is intended for environments with strict data protection requirements.\n\n#### Helm chart\n\n* Added [`config.connector.per_connection_limits`](../../installation/native-node/helm-chart-conf.md#configconnectorper_connection_limits) to control `keep-alive` connection limits\n\n#### Docker image\n\n* Added [`connector.per_connection_limits`](../../installation/native-node/all-in-one-conf.md#connectorper_connection_limits) to control `keep-alive` connection limits\n* Added support for the [`WALLARM_ATTACKS_DETAILED_EXPORT` environment variable](../../installation/native-node/docker-image.md#4-run-the-docker-container) to optionally disable exporting full attack data to Wallarm Cloud\n\n    This is intended for environments with strict data protection requirements."
  },
  {
    "artifact_id": "native-node",
    "version": "0.14.1",
    "line": "0.x",
    "date": "2025-05-07",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0141-2025-05-07",
    "body_markdown": "#### All-in-one installer\n\n* Added support for [**enumeration**](../../api-protection/enumeration-attack-protection.md) mitigation controls\n* Added support for [**DoS protection**](../../api-protection/dos-protection.md) mitigation control\n* Added support for the [IBM API Connect connector](../../installation/connectors/ibm-api-connect.md)\n* Fixed the [CVE-2024-56406](https://nvd.nist.gov/vuln/detail/CVE-2024-56406), [CVE-2025-31115](https://nvd.nist.gov/vuln/detail/CVE-2025-31115) vulnerabilities\n* Added support for external health check endpoint in the `connector-server` mode\n\n    This is controlled by the new [`connector.external_health_check`](../../installation/native-node/all-in-one-conf.md#connectorexternal_health_check) configuration section.\n* Fixed a recurring intermittent bug that could cause occasional corruption of request and response bodies\n* Fixed incorrect display of Native Node versions in Wallarm Console → **Nodes**\n\n#### Helm chart\n\n* Added support for the [IBM API Connect connector](../../installation/connectors/ibm-api-connect.md)\n* Fixed the [CVE-2025-22871](https://nvd.nist.gov/vuln/detail/CVE-2025-22871) vulnerability\n* Fixed handling of `clusterIP: None` in Helm chart headless service\n* Fixed a recurring intermittent bug that could cause occasional corruption of request and response bodies\n* Fixed incorrect display of Native Node versions in Wallarm Console → **Nodes**\n\n#### Docker image\n\n* Added support for the [IBM API Connect connector](../../installation/connectors/ibm-api-connect.md)\n* Fixed the [CVE-2025-22871](https://nvd.nist.gov/vuln/detail/CVE-2025-22871) vulnerability\n* Added support for external health check endpoint\n\n    This is controlled by the new [`connector.external_health_check`](../../installation/native-node/all-in-one-conf.md#connectorexternal_health_check) configuration section.\n* Fixed a recurring intermittent bug that could cause occasional corruption of request and response bodies\n* Fixed incorrect display of Native Node versions in Wallarm Console → **Nodes**"
  },
  {
    "artifact_id": "native-node",
    "version": "0.14.0",
    "line": "0.x",
    "date": "2025-05-07",
    "url": "https://docs.wallarm.com/updating-migrating/native-node/node-artifact-versions/#0140-2025-04-16",
    "body_markdown": "#### All-in-one installer\n\n* Wallarm Node now uses **wstore**, a Wallarm-developed service, instead of Tarantool for local postanalytics processing\n* The collectd service, previously installed on all filtering nodes, has been removed along with its related plugins\n    \n    Metrics are now collected and sent using Wallarm's built-in mechanisms, reducing dependencies on external tools.\n\n#### Helm chart\n\n* Wallarm Node now uses **wstore**, a Wallarm-developed service, instead of Tarantool for local postanalytics processing\n* All `tarantool` references in `values.yaml` (including container names and parameter keys) have been renamed to `wstore`\n\n    If you override these parameters in your configuration, update their names accordingly.\n* The collectd service, previously installed on all filtering nodes, has been removed along with its related plugins\n    \n    Metrics are now collected and sent using Wallarm's built-in mechanisms, reducing dependencies on external tools.\n* Renamed the `container` label to `type` in all Prometheus metrics matching `*_container_*` to prevent conflicts with Kubernetes system labels\n\n#### Docker image\n\n* Wallarm Node now uses **wstore**, a Wallarm-developed service, instead of Tarantool for local postanalytics processing\n* The collectd service, previously installed on all filtering nodes, has been removed along with its related plugins\n    \n    Metrics are now collected and sent using Wallarm's built-in mechanisms, reducing dependencies on external tools.\n\n#### Amazon Machine Image (AMI)\n\n* Initial release"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.3",
    "line": "0.x",
    "date": "2025-05-07",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0133-2025-05-07",
    "body_markdown": "#### All-in-one installer\n\n* Added support for the [IBM API Connect connector](../../installation/connectors/ibm-api-connect.md)\n* Fixed the [CVE-2024-56406](https://nvd.nist.gov/vuln/detail/CVE-2024-56406), [CVE-2025-31115](https://nvd.nist.gov/vuln/detail/CVE-2025-31115), [CVE-2025-22871](https://nvd.nist.gov/vuln/detail/CVE-2025-22871) vulnerabilities\n* Added support for external health check endpoint in the `connector-server` mode\n\n    This is controlled by the new [`connector.external_health_check`](../../installation/native-node/all-in-one-conf.md#connectorexternal_health_check) configuration section.\n* Fixed a recurring intermittent bug that could cause occasional corruption of request and response bodies\n* The following fixes and updates were made in `tcp-capture` mode:\n\n    * GoReplay is now built with Go 1.24\n    * Fixed: `go-node` process no longer hangs when the `goreplay` process crashes\n    * Fixed a crash caused by a slice out-of-bounds error during header parsing in GoReplay\n* Fixed incorrect display of Native Node versions in Wallarm Console → **Nodes**\n\n#### Helm chart\n\n* Added support for the [IBM API Connect connector](../../installation/connectors/ibm-api-connect.md)\n* Renamed the `container` label to `type` in all Prometheus metrics matching `*_container_*` to prevent conflicts with Kubernetes system labels\n* Fixed the [CVE-2025-22871](https://nvd.nist.gov/vuln/detail/CVE-2025-22871) vulnerability\n* Fixed handling of `clusterIP: None` in Helm chart headless service\n* Fixed a recurring intermittent bug that could cause occasional corruption of request and response bodies\n* Fixed incorrect display of Native Node versions in Wallarm Console → **Nodes**\n\n#### Docker image\n\n* Added support for the [IBM API Connect connector](../../installation/connectors/ibm-api-connect.md)\n* Fixed the [CVE-2025-22871](https://nvd.nist.gov/vuln/detail/CVE-2025-22871) vulnerability\n* Added support for external health check endpoint\n\n    This is controlled by the new [`connector.external_health_check`](../../installation/native-node/all-in-one-conf.md#connectorexternal_health_check) configuration section.\n* Fixed a recurring intermittent bug that could cause occasional corruption of request and response bodies\n* Fixed incorrect display of Native Node versions in Wallarm Console → **Nodes**"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.2",
    "line": "0.x",
    "date": "2025-04-15",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0132-2025-04-15",
    "body_markdown": "#### All-in-one installer\n\n* Fixed an intermittent bug causing occasional request and response body corruption\n\n#### Helm chart\n\n* Fixed an intermittent bug causing occasional request and response body corruption\n\n#### Docker image\n\n* Fixed an intermittent bug causing occasional request and response body corruption"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.1",
    "line": "0.x",
    "date": "2025-04-09",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0131-2025-04-09",
    "body_markdown": "#### All-in-one installer\n\n* Stability improvements\n\n#### Helm chart\n\n* Stability improvements\n\n#### Docker image\n\n* Stability improvements"
  },
  {
    "artifact_id": "native-node",
    "version": "0.13.0",
    "line": "0.x",
    "date": "2025-03-31",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0130-2025-03-31",
    "body_markdown": "#### All-in-one installer\n\n* `tarantool_exporter` is now `postanalytics_exporter` in the Native Node configuration file. This change also requires an update to the `version` value:\n\n    ```diff\n    -version: 3\n    +version: 4\n\n    -tarantool_exporter:\n    +postanalytics_exporter:\n      address: 127.0.0.1:3313\n      enabled: true\n    ```\n    \n    Deployments using version 2 or version 3 will continue to work with Native Node 0.13.x and above if you do not explicitly specify the `postanalytics_exporter` configuration. However, this approach is deprecated, and updating to the new configuration format is recommended.\n* Added support for the [`envoy-external-filter` operation mode for Istio/Envoy external gRPC processing filter](../../installation/connectors/istio.md)\n* Fixed the [CVE-2024-56171](https://nvd.nist.gov/vuln/detail/CVE-2024-56171), [CVE-2025-24928](https://nvd.nist.gov/vuln/detail/CVE-2025-24928), [CVE-2025-22869](https://nvd.nist.gov/vuln/detail/CVE-2025-22869), [CVE-2025-22868](https://nvd.nist.gov/vuln/detail/CVE-2025-22868) vulnerabilities\n* Fixed request counter when `wallarm_mode: off` (they are not counted)\n\n#### Helm chart\n\n* Added support for the [`envoy-external-filter` operation mode for Istio/Envoy external gRPC processing filter](../../installation/connectors/istio.md)\n* Fixed the [CVE-2024-56171](https://nvd.nist.gov/vuln/detail/CVE-2024-56171), [CVE-2025-24928](https://nvd.nist.gov/vuln/detail/CVE-2025-24928), [CVE-2025-22869](https://nvd.nist.gov/vuln/detail/CVE-2025-22869), [CVE-2025-22868](https://nvd.nist.gov/vuln/detail/CVE-2025-22868) vulnerabilities\n* Fixed request counter when `wallarm_mode: off` (they are not counted)\n\n#### Docker image\n\n* `tarantool_exporter` is now `postanalytics_exporter` in the Native Node configuration file. This change also requires an update to the `version` value:\n\n    ```diff\n    -version: 3\n    +version: 4\n\n    -tarantool_exporter:\n    +postanalytics_exporter:\n      address: 127.0.0.1:3313\n      enabled: true\n    ```\n    \n    Deployments using version 2 or version 3 will continue to work with Native Node 0.13.x and above if you do not explicitly specify the `postanalytics_exporter` configuration. However, this approach is deprecated, and updating to the new configuration format is recommended.\n* Added support for the [`envoy-external-filter` operation mode for Istio/Envoy external gRPC processing filter](../../installation/connectors/istio.md)\n* Fixed the [CVE-2024-56171](https://nvd.nist.gov/vuln/detail/CVE-2024-56171), [CVE-2025-24928](https://nvd.nist.gov/vuln/detail/CVE-2025-24928), [CVE-2025-22869](https://nvd.nist.gov/vuln/detail/CVE-2025-22869), [CVE-2025-22868](https://nvd.nist.gov/vuln/detail/CVE-2025-22868) vulnerabilities\n* Fixed request counter when `wallarm_mode: off` (they are not counted)"
  },
  {
    "artifact_id": "native-node",
    "version": "0.12.1",
    "line": "0.x",
    "date": "2025-02-27",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0121-2025-02-27",
    "body_markdown": "#### All-in-one installer\n\n* Fixed the [CVE-2025-22869](https://nvd.nist.gov/vuln/detail/CVE-2025-22869), [CVE-2024-13176](https://nvd.nist.gov/vuln/detail/CVE-2024-13176), [CVE-2024-56326](https://nvd.nist.gov/vuln/detail/CVE-2024-56326), [CVE-2024-56201](https://nvd.nist.gov/vuln/detail/CVE-2024-56201) and [CVE-2025-22866](https://nvd.nist.gov/vuln/detail/CVE-2025-22866) vulnerabilities\n* Fixed the [CVE-2025-26519](https://nvd.nist.gov/vuln/detail/CVE-2025-26519) and [CVE-2024-12797](https://nvd.nist.gov/vuln/detail/CVE-2024-12797) vulnerabilities\n* Fixed vpatch attacks not being blocked in monitoring mode\n* Fixed serialized requests missing response time and length fields\n* Fixed chained headers log level from `warn` to `trace`\n\n#### Helm chart\n\n* Fixed the [CVE-2025-22869](https://nvd.nist.gov/vuln/detail/CVE-2025-22869), [CVE-2024-13176](https://nvd.nist.gov/vuln/detail/CVE-2024-13176), [CVE-2024-56326](https://nvd.nist.gov/vuln/detail/CVE-2024-56326), [CVE-2024-56201](https://nvd.nist.gov/vuln/detail/CVE-2024-56201) and [CVE-2025-22866](https://nvd.nist.gov/vuln/detail/CVE-2025-22866) vulnerabilities\n* Fixed the [CVE-2025-26519](https://nvd.nist.gov/vuln/detail/CVE-2025-26519) and [CVE-2024-12797](https://nvd.nist.gov/vuln/detail/CVE-2024-12797) vulnerabilities\n* Fixed vpatch attacks not being blocked in monitoring mode\n* Fixed serialized requests missing response time and length fields\n* Fixed chained headers log level from `warn` to `trace`\n\n#### Docker image\n\n* Fixed the [CVE-2025-22869](https://nvd.nist.gov/vuln/detail/CVE-2025-22869), [CVE-2024-13176](https://nvd.nist.gov/vuln/detail/CVE-2024-13176), [CVE-2024-56326](https://nvd.nist.gov/vuln/detail/CVE-2024-56326), [CVE-2024-56201](https://nvd.nist.gov/vuln/detail/CVE-2024-56201) and [CVE-2025-22866](https://nvd.nist.gov/vuln/detail/CVE-2025-22866) vulnerabilities\n* Fixed the [CVE-2025-26519](https://nvd.nist.gov/vuln/detail/CVE-2025-26519) and [CVE-2024-12797](https://nvd.nist.gov/vuln/detail/CVE-2024-12797) vulnerabilities\n* Fixed vpatch attacks not being blocked in monitoring mode\n* Fixed serialized requests missing response time and length fields\n* Fixed chained headers log level from `warn` to `trace`"
  },
  {
    "artifact_id": "native-node",
    "version": "0.12.0",
    "line": "0.x",
    "date": "2025-02-05",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0120-2025-02-05",
    "body_markdown": "#### All-in-one installer\n\n* Added support for response parameters in [API Sessions](../../api-sessions/overview.md) for providing the full context of user activities and more precise [session grouping](../../api-sessions/setup.md#session-grouping) (see detailed [change description](../../updating-migrating/what-is-new.md#response-parameters-in-api-sessions))\n* Added a full-fledged [GraphQL parser](../../user-guides/rules/request-processing.md#gql) (see detailed [change description](../../updating-migrating/what-is-new.md#full-fledged-graphql-parser)) that allows:\n\n    * Improved detection of the input validation attacks in GraphQL-specific request points\n    * Fine-tuning attack detection for specific GraphQL points (e.g. disable detection of specific attack types in specific points)\n    * Analyzing specific parts of GraphQL requests in API sessions\n\n* Fixed invalid time value in serialized requests to properly display the [resource overlimit](../../user-guides/rules/configure-overlimit-res-detection.md) attacks\n* Fixed problem for the `invalid_xml` attack detection in responses\n* Fixed an issue where user-overridden headers were being dropped\n\n#### Helm chart\n\n* Added support for response parameters in [API Sessions](../../api-sessions/overview.md) for providing the full context of user activities and more precise [session grouping](../../api-sessions/setup.md#session-grouping) (see detailed [change description](../../updating-migrating/what-is-new.md#response-parameters-in-api-sessions))\n* Added a full-fledged [GraphQL parser](../../user-guides/rules/request-processing.md#gql) (see detailed [change description](../../updating-migrating/what-is-new.md#full-fledged-graphql-parser)) that allows:\n\n    * Improved detection of the input validation attacks in GraphQL-specific request points\n    * Fine-tuning attack detection for specific GraphQL points (e.g. disable detection of specific attack types in specific points)\n    * Analyzing specific parts of GraphQL requests in API sessions\n\n* Fixed invalid time value in serialized requests to properly display the [resource overlimit](../../user-guides/rules/configure-overlimit-res-detection.md) attacks\n* Fixed problem for the `invalid_xml` attack detection in responses\n* Fixed an issue where user-overridden headers were being dropped\n\n#### Docker image\n\n* Added support for response parameters in [API Sessions](../../api-sessions/overview.md) for providing the full context of user activities and more precise [session grouping](../../api-sessions/setup.md#session-grouping) (see detailed [change description](../../updating-migrating/what-is-new.md#response-parameters-in-api-sessions))\n* Added a full-fledged [GraphQL parser](../../user-guides/rules/request-processing.md#gql) (see detailed [change description](../../updating-migrating/what-is-new.md#full-fledged-graphql-parser)) that allows:\n\n    * Improved detection of the input validation attacks in GraphQL-specific request points\n    * Fine-tuning attack detection for specific GraphQL points (e.g. disable detection of specific attack types in specific points)\n    * Analyzing specific parts of GraphQL requests in API sessions\n\n* Fixed invalid time value in serialized requests to properly display the [resource overlimit](../../user-guides/rules/configure-overlimit-res-detection.md) attacks\n* Fixed problem for the `invalid_xml` attack detection in responses\n* Fixed an issue where user-overridden headers were being dropped"
  },
  {
    "artifact_id": "native-node",
    "version": "0.11.0",
    "line": "0.x",
    "date": "2025-01-31",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0110-2025-01-31",
    "body_markdown": "#### All-in-one installer\n\n* Added support for the [`WALLARM_APID_ONLY` environment variable](../../installation/native-node/all-in-one.md#installer-launch-options) which enables API Discovery-only mode\n\n    In this mode, attacks are blocked locally (if enabled) but not exported to Wallarm Cloud, while [API Discovery](../../api-discovery/overview.md), [API session tracking](../../api-sessions/overview.md), and [security vulnerability detection](../../about-wallarm/detecting-vulnerabilities.md) remain fully functional. This mode is rarely needed, in most environments, using this mode is unnecessary.\n* Improved the Native Node's interaction with GoReplay, resulting in the following configuration changes:\n\n    ``` diff\n    -version: 2\n    +version: 3\n\n    -middleware:\n    +goreplay:\n      parse_responses: true\n      response_timeout: 5s\n      url_normalize: true\n    ```\n\n    During upgrade, update the `version` value and replace the `middleware` section with `goreplay` if explicitly specified in the initial configuration file.\n* Fixed a small HTTP parsing bug in the `tcp-capture` mode\n\n#### Helm chart\n\n* Fixed some bugs\n\n#### Docker image\n\n* Added support for the [`WALLARM_APID_ONLY` environment variable](../../installation/native-node/docker-image.md#4-run-the-docker-container) which enables API Discovery-only mode\n\n    In this mode, attacks are blocked locally (if enabled) but not exported to Wallarm Cloud, while [API Discovery](../../api-discovery/overview.md), [API session tracking](../../api-sessions/overview.md), and [security vulnerability detection](../../about-wallarm/detecting-vulnerabilities.md) remain fully functional. This mode is rarely needed, in most environments, using this mode is unnecessary."
  },
  {
    "artifact_id": "native-node",
    "version": "0.10.1",
    "line": "0.x",
    "date": "2025-01-02",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0101-2025-01-02",
    "body_markdown": "#### All-in-one installer\n\n* Added support for sensitive business flows in [API Discovery](../../api-discovery/sbf.md) and [API Sessions](../../api-sessions/exploring.md#sensitive-business-flows)\n* Added support for the [Fastly](../../installation/connectors/fastly.md) connector\n* Fixed potential request loss at mesh startup\n* Resolved the [CVE-2024-45337](https://scout.docker.com/vulnerabilities/id/CVE-2024-45337) and [CVE-2024-45338](https://scout.docker.com/vulnerabilities/id/CVE-2024-45338) vulnerabilities\n* Fixed an issue where some requests were processed unsuccessfully, potentially affecting API Sessions, Credential Stuffing, and API Abuse Prevention\n\n#### Helm chart\n\n* Added support for sensitive business flows in [API Discovery](../../api-discovery/sbf.md) and [API Sessions](../../api-sessions/exploring.md#sensitive-business-flows)\n* Added support for the [Fastly](../../installation/connectors/fastly.md) connector\n* Fixed potential request loss at mesh startup\n* Resolved the [CVE-2024-45337](https://scout.docker.com/vulnerabilities/id/CVE-2024-45337) and [CVE-2024-45338](https://scout.docker.com/vulnerabilities/id/CVE-2024-45338) vulnerabilities\n* Fixed an issue where some requests were processed unsuccessfully, potentially affecting API Sessions, Credential Stuffing, and API Abuse Prevention\n\n#### Docker image\n\n* Added support for sensitive business flows in [API Discovery](../../api-discovery/sbf.md) and [API Sessions](../../api-sessions/exploring.md#sensitive-business-flows)\n* Added support for the [Fastly](../../installation/connectors/fastly.md) connector\n* Fixed potential request loss at mesh startup\n* Resolved the [CVE-2024-45337](https://scout.docker.com/vulnerabilities/id/CVE-2024-45337) and [CVE-2024-45338](https://scout.docker.com/vulnerabilities/id/CVE-2024-45338) vulnerabilities\n* Fixed an issue where some requests were processed unsuccessfully, potentially affecting API Sessions, Credential Stuffing, and API Abuse Prevention"
  },
  {
    "artifact_id": "native-node",
    "version": "0.10.0",
    "line": "0.x",
    "date": "2024-12-19",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#0100-2024-12-19",
    "body_markdown": "#### All-in-one installer\n\n* Added URL normalization before selecting route configurations and analyzing data with libproton in `tcp-capture` mode\n\n    This is controlled by the [`middleware.url_normalize`](../../installation/native-node/all-in-one-conf.md#goreplayurl_normalize) parameter (`true` by default).\n* Introduced the [`http_inspector.wallarm_process_time_limit`](../../installation/native-node/all-in-one-conf.md#http_inspectorwallarm_process_time_limit) parameter to control request processing time locally\n\n    The default is `1s` unless overridden by Wallarm Console settings.\n* Prometheus metrics updates (available in the :9000 port):\n\n    * Removed obsolete metrics with static zero values.\n    * Enhanced `http_inspector_requests_processed` and `http_inspector_threats_found` metrics with `anything` allowed to be specified in `source` label values.\n    * Added the `http_inspector_adjusted_counters` metric for tracking request and attack counts.\n\n#### Helm chart\n\n* Introduced more granular logging configuration options in the [`config.connector.log`](../../installation/native-node/helm-chart-conf.md#configconnectorlog) section, replacing the single `config.connector.log_level` parameter\n* The default log level is now `info` (previously `debug`)\n\n#### Docker image\n\n* Resolved the critical [CVE-2024-45337](https://scout.docker.com/vulnerabilities/id/CVE-2024-45337) vulnerability and addressed several minor vulnerabilities\n* Added URL normalization before selecting route configurations and analyzing data with libproton in `tcp-capture` mode\n\n    This is controlled by the [`middleware.url_normalize`](../../installation/native-node/all-in-one-conf.md#goreplayurl_normalize) parameter (`true` by default).\n* Introduced the [`http_inspector.wallarm_process_time_limit`](../../installation/native-node/all-in-one-conf.md#http_inspectorwallarm_process_time_limit) parameter to control request processing time locally\n\n    The default is `1s` unless overridden by Wallarm Console settings.\n* Prometheus metrics updates (available in the :9000 port):\n\n    * Removed obsolete metrics with static zero values.\n    * Enhanced `http_inspector_requests_processed` and `http_inspector_threats_found` metrics with `anything` allowed to be specified in `source` label values.\n    * Added the `http_inspector_adjusted_counters` metric for tracking request and attack counts."
  },
  {
    "artifact_id": "native-node",
    "version": "0.9.1",
    "line": "0.x",
    "date": "2024-12-10",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#091-2024-12-10",
    "body_markdown": "#### All-in-one installer\n\n* Minor bug fixes\n\n#### Helm chart\n\n* Minor bug fixes\n\n#### Docker image\n\n* Minor bug fixes"
  },
  {
    "artifact_id": "native-node",
    "version": "0.9.0",
    "line": "0.x",
    "date": "2024-12-04",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#090-2024-12-04",
    "body_markdown": "#### All-in-one installer\n\n* The default endpoint for JSON-formatted `/wallarm-status` metrics has changed to `127.0.0.1:10246` (the `metrics.legacy_status.listen_address` parameter value). This legacy service is critical for Node functionality but does not require direct interaction.\n\n#### Helm chart\n\n* Some fixes for consistent traffic distribution across all aggregation replicas.\n* The default endpoint for JSON-formatted `/wallarm-status` metrics has changed to `127.0.0.1:10246` (the `metrics.legacy_status.listen_address` parameter value). This legacy service is critical for Node functionality but does not require direct interaction.\n* Minor fixes to increase reliability under diverse deployment conditions.\n\n#### Docker image\n\n* Some fixes for consistent traffic distribution across all aggregation replicas.\n* The default endpoint for JSON-formatted `/wallarm-status` metrics has changed to `127.0.0.1:10246` (the `metrics.legacy_status.listen_address` parameter value). This legacy service is critical for Node functionality but does not require direct interaction.\n* Minor fixes to increase reliability under diverse deployment conditions."
  },
  {
    "artifact_id": "native-node",
    "version": "0.8.3",
    "line": "0.x",
    "date": "2024-11-14",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#083-2024-11-14",
    "body_markdown": "#### All-in-one installer\n\n* Added support for MuleSoft connector 3.0.x\n\n#### Helm chart\n\n* Added support for MuleSoft connector v3.0.x\n\n#### Docker image\n\n* Added support for MuleSoft connector v3.0.x"
  },
  {
    "artifact_id": "native-node",
    "version": "0.8.2",
    "line": "0.x",
    "date": "2024-11-11",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#082-2024-11-11",
    "body_markdown": "#### All-in-one installer\n\n* Fixed some bugs in the `wallarm-status` service operation\n\n#### Helm chart\n\n* Fixed some bugs in the `wallarm-status` service operation\n\n#### Docker image\n\n* Fixed some bugs in the `wallarm-status` service operation"
  },
  {
    "artifact_id": "native-node",
    "version": "0.8.1",
    "line": "0.x",
    "date": "2024-11-07",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#081-2024-11-06",
    "body_markdown": "#### All-in-one installer\n\n* Fixed regression in the `request_id` format introduced in 0.8.0\n\n#### Helm chart\n\n* Added support for the [Broadcom Layer7 API Gateway](../../installation/connectors/layer7-api-gateway.md) connector\n* Added support for [API Sessions](../../api-sessions/overview.md)\n* [Improved](../what-is-new.md#new-in-limiting-request-processing-time) limiting request processing time\n* Reduced memory usage during node registration\n* Some bug fixes\n\n#### Docker image\n\n* Added support for the [Broadcom Layer7 API Gateway](../../installation/connectors/layer7-api-gateway.md) connector\n* Added support for [API Sessions](../../api-sessions/overview.md)\n* [Improved](../what-is-new.md#new-in-limiting-request-processing-time) limiting request processing time\n* Changed default values for the following parameters:\n\n    * The [`connector.blocking`](../../installation/native-node/all-in-one-conf.md#connectorblocking) parameter now defaults to `true`, enabling the Native Node's general capability to block incoming requests without manual configuration during deployment.\n    * The [`route_config.wallarm_mode`](../../installation/native-node/all-in-one-conf.md#route_configwallarm_mode) parameter, which sets the traffic filtration mode, now defaults to `monitoring`, providing an optimal setup for initial deployments.\n* Added URL normalization before selecting route configurations and analyzing data with libproton (controlled by the [`controller.url_normalize`](../../installation/native-node/all-in-one-conf.md#connectorurl_normalize) parameter which is set to `true` by default)\n* Reduced memory usage during node registration\n* Some bug fixes"
  },
  {
    "artifact_id": "native-node",
    "version": "0.8.0",
    "line": "0.x",
    "date": "2024-11-06",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#080-2024-11-06",
    "body_markdown": "#### All-in-one installer\n\n* Added support for the [Broadcom Layer7 API Gateway](../../installation/connectors/layer7-api-gateway.md) connector\n* Added support for [API Sessions](../../api-sessions/overview.md)\n* [Improved](../what-is-new.md#new-in-limiting-request-processing-time) limiting request processing time\n* Changed default values for the following parameters:\n\n    * The [`connector.blocking`](../../installation/native-node/all-in-one-conf.md#connectorblocking) parameter now defaults to `true`, enabling the Native Node's general capability to block incoming requests without manual configuration during deployment.\n    * The [`route_config.wallarm_mode`](../../installation/native-node/all-in-one-conf.md#route_configwallarm_mode) parameter, which sets the traffic filtration mode, now defaults to `monitoring`, providing an optimal setup for initial deployments.\n* Added URL normalization before selecting route configurations and analyzing data with libproton (controlled by the [`controller.url_normalize`](../../installation/native-node/all-in-one-conf.md#connectorurl_normalize) parameter which is set to `true` by default)\n* Reduced memory usage during node registration\n* Some bug fixes"
  },
  {
    "artifact_id": "native-node",
    "version": "0.7.0",
    "line": "0.x",
    "date": "2024-10-17",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#070-2024-10-16",
    "body_markdown": "#### All-in-one installer\n\n* Fixed an issue where some internal service connector headers were not being stripped before processing\n* Added support for the mesh feature in `connector-server` mode, enabling consistent request/response routing across multiple node replicas\n\n    This introdcues the new configuration parameters under [`connector.mesh`](../../installation/native-node/all-in-one-conf.md#connectormesh) to configure the mesh functionality.\n\n#### Helm chart\n\n* Fixed an issue where some internal service connector headers were not being stripped before processing\n* Added support for [customizing sensitive data detection](../../api-discovery/setup.md#customizing-sensitive-data-detection) in API Discovery\n* Fixed memory leak on duplicate response headers in [libproton](../../about-wallarm/protecting-against-attacks.md#basic-set-of-detectors)\n* Fixed memory leak related to IP addresses that are not in [IP lists](../../user-guides/ip-lists/overview.md) but have [known source](../../user-guides/ip-lists/overview.md#select-object)\n* Updated artifact naming from \"next\" to \"native\"\n    \n    `wallarm/wallarm-node-next` → `wallarm/wallarm-node-native`\n* Updated the `config.wallarm_node_address` parameter value in the `KongClusterPlugin` Kubernetes resource used to activate the Wallarm Lua plugin:\n\n    `http://next-processing.wallarm-node.svc.cluster.local:5000` → `http://native-processing.wallarm-node.svc.cluster.local:5000`\n\n#### Docker image\n\n* Fixed an issue where some internal service connector headers were not being stripped before processing\n* Added support for the mesh feature in `connector-server` mode, enabling consistent request/response routing across multiple node replicas\n\n    This introdcues the new configuration parameters under [`connector.mesh`](../../installation/native-node/all-in-one-conf.md#connectormesh) to configure the mesh functionality."
  },
  {
    "artifact_id": "native-node",
    "version": "0.6.0",
    "line": "0.x",
    "date": "2024-10-10",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#060-2024-10-10",
    "body_markdown": "#### All-in-one installer\n\n* Added support for [customizing sensitive data detection](../../api-discovery/setup.md#customizing-sensitive-data-detection) in API Discovery\n* Fixed memory leak on duplicate response headers in [libproton](../../about-wallarm/protecting-against-attacks.md#basic-set-of-detectors)\n* Fixed memory leak related to IP addresses that are not in [IP lists](../../user-guides/ip-lists/overview.md) but have [known source](../../user-guides/ip-lists/overview.md#select-object)\n* Updated artifact naming from \"next\" to \"native\"\n    \n    `https://meganode.wallarm.com/next/aionext-<VERSION>.<ARCH>.sh` → `https://meganode.wallarm.com/native/aio-native-<VERSION>.<ARCH>.sh`\n\n#### Docker image\n\n* Initial release"
  },
  {
    "artifact_id": "native-node",
    "version": "0.5.3",
    "line": "0.x",
    "date": "2024-10-01",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#053-2024-10-01",
    "body_markdown": "#### Helm chart\n\n* Initial release"
  },
  {
    "artifact_id": "native-node",
    "version": "0.5.2",
    "line": "0.x",
    "date": "2024-09-17",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#052-2024-09-17",
    "body_markdown": "#### All-in-one installer\n\n* Fixed installation failure issue when no WAAP + API Security subscription is activated\n* Fixed delays in attack export\n* Fixed an issue with the C memory allocator that caused a performance slowdown"
  },
  {
    "artifact_id": "native-node",
    "version": "0.5.1",
    "line": "0.x",
    "date": "2024-09-16",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#051-2024-09-16",
    "body_markdown": "#### All-in-one installer\n\n* Added configurable access log output via [`log.access_log` parameters](../../installation/native-node/all-in-one-conf.md#logaccess_logenabled)"
  },
  {
    "artifact_id": "native-node",
    "version": "0.5.0",
    "line": "0.x",
    "date": "2024-09-11",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#050-2024-09-11",
    "body_markdown": "#### All-in-one installer\n\n* Minor technical improvements and optimizations"
  },
  {
    "artifact_id": "native-node",
    "version": "0.4.3",
    "line": "0.x",
    "date": "2024-09-05",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#043-2024-09-05",
    "body_markdown": "#### All-in-one installer\n\n* Fixed an issue causing ~0.1% of data source messages to be silently lost due to a typo"
  },
  {
    "artifact_id": "native-node",
    "version": "0.4.1",
    "line": "0.x",
    "date": "2024-08-27",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#041-2024-08-27",
    "body_markdown": "#### All-in-one installer\n\n* Added support for wildcard matching in the [`route_config.routes.host`](../../installation/native-node/all-in-one-conf.md#host) configuration parameter"
  },
  {
    "artifact_id": "native-node",
    "version": "0.4.0",
    "line": "0.x",
    "date": "2024-08-22",
    "url": "https://docs.wallarm.com/5.x/updating-migrating/native-node/node-artifact-versions/#040-2024-08-22",
    "body_markdown": "#### All-in-one installer\n\n* [Initial release](../../installation/oob/tcp-traffic-mirror/deployment.md)"
  }
]