SysReptor

No entries match these filters. Clear filters

1. 2026.82 Sep 23, 2026 · issue 083

   SysReptor 2026.82 adds AI agent skills, AGENTS.md project instructions, and an Audit Trail for sensitive actions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2026.82 https://github.com/Syslifters/sysreptor.git
   # already have the repo? check out this version:
   $ git checkout 2026.82

   • Adds AGENTS.md support in projects so per-project AI agent instructions can be defined alongside report content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds skills support to the AI agent for extended, composable automation capabilities.
   • Adds an Audit Trail for sensitive actions to track privileged operations across the platform.
   • Supports importing multiple files at once.
   • Adds AGENTS.md support in projects so per-project AI agent instructions can be defined alongside report content.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds an Audit Trail for sensitive actions to track privileged operations across the platform.

   2 more in Everything

2. 2026.75 Sep 16, 2026 · issue 076

   SysReptor 2026.75 adds a JSON field type, AI agent on by default, Jira pagination, and retest status color indicators.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2026.75 https://github.com/Syslifters/sysreptor.git
   # already have the repo? check out this version:
   $ git checkout 2026.75

   • Adds json field type for report fields, enabling structured data entry in findings and templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Plugin jira: follows API pagination to list all available projects, removing the previous cap on visible Jira projects.
   • Enables the AI agent by default in settings, so new deployments get AI-assisted reporting without manual activation.
   • Adds color indicators for all retest statuses in the UI, making pass/fail/pending retest outcomes visually distinct at a glance.
   • Runs post-update tasks automatically after updating SysReptor via update.sh, replacing any manual post-upgrade steps.

   +3 more show less

   • Supports image uploads in shared Excalidraw notes, allowing diagrams to include raster images in collaborative sessions.
   • Adds a built-in design for the OffSec OSAI certification report.
   • Ranks project search results to prioritize name and tag matches over content matches.
   • Adds json field type for report fields, enabling structured data entry in findings and templates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a built-in design for the OffSec OSAI certification report.

   6 more in Everything

3. advisory CVE-2026-81182 Aug 20, 2026 · issue 128
   • CVE-2026-81182: Unauthorized file disclosure by broken access control in writable shared notes (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 4.2, affects <=2026.61)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
4. 2026.68 Aug 19, 2026 · issue 050

   SysReptor 2026.68 adds encrypted note file downloads, AI agent Q&A, default note structures, and retest status color customization.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2026.68 https://github.com/Syslifters/sysreptor.git
   # already have the repo? check out this version:
   $ git checkout 2026.68

   • Supports downloading note files via an encrypted channel to prevent proxies from inspecting downloads.
   • AI agent can now ask the user questions during agent interactions.
   • Adds default note structures to HTB, OffSec, and demo designs.
   • Allows customizing retest status colors in the UI.
   • Rotates session cookie after shared note password authentication.

   +2 more show less

   • Renders markdown preview content in iframes.
   • Improves template translation selection logic in the scanimport plugin.

   7 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The deprecated Excalidraw plugin has been removed.
5. advisory CVE-2026-81180 Jul 30, 2026 · issue 128
   • CVE-2026-81180: Authenticated RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives. by insecure image processing (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 8.8, affects <=2026.55)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
6. 2026.61 Jul 29, 2026 · issue 029

   SysReptor 2026.61 adds Prowler/ScoutSuite import, stdin AES key support, and granular API token permissions.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2026.61 https://github.com/Syslifters/sysreptor.git
   # already have the repo? check out this version:
   $ git checkout 2026.61

   • Adds Prowler and ScoutSuite importers to the scanimport plugin for ingesting cloud security scan results.
   • Allows creating API tokens with or without superuser permissions for finer-grained access control.
   • Adds automatic user lockout after multiple failed MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. login attempts.
   • Enables backup/restorebackup commands to read AES encryption keys from stdin for safer secret handling.
   • Validates initial status transitions at report/finding creation time.

   +4 more show less

   • Restricts mention and assignee notifications to project members only.
   • Generates random Postgres and Redis passwords automatically during installation via install.sh.
   • Switches Django cache backend to Redis.
   • Hardens PDF rendering pipeline.

   9 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !PDF compression is removed and the COMPRESS_PDFS setting no longer exists; any configuration referencing COMPRESS_PDFS will need to be cleaned up.
   • !Plugin loading is reworked so that the source code directory is now read-only in the Docker image; plugins or workflows that write to that directory will break.
7. advisory CVE-2026-81179 Jul 21, 2026 · issue 128
   • CVE-2026-81179: Host header injection might allow account takeover (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 8.1, affects <=2026.55)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
8. 2026.58 Jul 21, 2026 · issue 021

   SysReptor 2026.58 adds plugin management UI, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. identity API token auth, and AI agent delete confirmation.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2026.58 https://github.com/Syslifters/sysreptor.git
   # already have the repo? check out this version:
   $ git checkout 2026.58

   • Enables enabling/disabling plugins directly from the settings web UI.
   • Supports SSO identity API for API token authentication.
   • AI agent now prompts for confirmation before reverting changes (delete).

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Forgot password functionality via email is disabled when ALLOWED_HOSTS is unset.
9. 2026.55 Jul 15, 2026 · issue 016

   SysReptor 2026.55 adds AI agent support for notes, release signing with cosign, and richer project filtering.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2026.55 https://github.com/Syslifters/sysreptor.git
   # already have the repo? check out this version:
   $ git checkout 2026.55

   • Signs releases and Docker images with cosign for supply-chain verification.
   • Adds name-based filters for project, design, and template list views.
   • Passes finding status to PDF rendering data, enabling status-aware report output.
   • Adds copy and download buttons for PDF passwords in the UI.
   • Allows copying global designs to private designs directly from the UI.

   +5 more show less

   • AI agent gains a virtual filesystem for project data access.
   • AI agent gains tool calls for searching project content.
   • Extends AI agent support to notes.
   • Shows AI agent-made changes with the ability to revert them.
   • Enables basic spellcheck for additional languages in the editor.

   10 details in Everything

10. 2026.50 Jun 17, 2026 · release notes

    SysReptor 2026.50 moves LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. config to the web UI, adds multi-model selection, and extends auto-delete to finished projects.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.50 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.50

    └──▷ USE IT
    Set a global auto-delete window that applies to both archived and finished projects, replacing the old archives-only setting.
    ini copy

    AUTOMATICALLY_DELETE_PROJECTS_AFTER=90  # in your SysReptor environment/config, replaces AUTOMATICALLY_DELETE_ARCHIVED_PROJECTS_AFTER

    • Moves LLM configuration (AI_AGENT_MODELS) from environment variables to the web UI for live management without restarts.
    • Supports multiple LLM models with in-UI model selection per session.
    • Extends AUTOMATICALLY_DELETE_PROJECTS_AFTER to cover both finished and archived projects (previously archives only).
    • Enables per-project customization of the auto-delete date.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The configuration key AUTOMATICALLY_DELETE_ARCHIVED_PROJECTS_AFTER is renamed to AUTOMATICALLY_DELETE_PROJECTS_AFTER; existing setups using the old key will stop applying auto-deletion on upgrade.
11. 2026.50 Jun 17, 2026 · issue 014

    SysReptor 2026.50 moves LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. config to the web UI, adds multi-model support, and extends auto-delete to finished projects.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.50 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.50

    └──▷ USE IT
    Enforce automatic deletion of finished and archived projects after 90 days — configure once in your environment rather than per-project.
    ini copy

    AUTOMATICALLY_DELETE_PROJECTS_AFTER=90

    Switch which LLM model is used for a session or configure available models without restarting the service.
    📍In the console, go to Settings › LLM Models and add or select from the configured AI_AGENT_MODELS entries.
    • Moves LLM configuration (AI_AGENT_MODELS) from environment variables into the web UI for easier management.
    • Supports multiple LLM models with per-session model selection directly in the UI.
    • Extends auto-delete policy (AUTOMATICALLY_DELETE_PROJECTS_AFTER) to cover both finished and archived projects, not just archived ones.
    • Enables customizing the deletion date on a per-project basis.
    • Shows note title in the browser window title for easier tab navigation.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The AUTOMATICALLY_DELETE_ARCHIVED_PROJECTS_AFTER configuration key is renamed to AUTOMATICALLY_DELETE_PROJECTS_AFTER
    • !LLM configuration AI_AGENT_MODELS is moved from environment variables to the web UI
12. 2026.42 Jun 3, 2026 · release notes

    SysReptor 2026.42 adds bulk finding creation, multi-select sidebar actions, and AI prompt copy support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.42 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.42

    • Displays all comments across a report when no specific finding or section is selected, giving a global comment overview.
    • Adds superuser privilege information when creating API tokens, improving visibility into token scope.
    • Supports multi-select and bulk actions in the report sidebar for faster report management.
    • Enables bulk creation of findings directly from templates.
    • Highlights inactive users in project member selection to reduce assignment mistakes.

    +1 more show less

    • Adds a copy button for AI prompts and responses for easier reuse.

    6 details in Everything

13. 2026.36 May 20, 2026 · release notes

    SysReptor 2026.36 adds project content search, S3 backup support, a file cleanup command, and markdown/image editor enhancements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.36 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.36

    └──▷ TRY IT
    Purge orphaned files that accumulate over time from deleted projects or attachments.
    copy

    $ docker compose exec app python manage.py cleanupfiles

    Search project contents without opening each project individually — use the search bar in the projects list view.
    📍In the console, go to Projects list view and enter keywords in the search bar to query across project contents.
    • Adds full-text search across project contents in the list view.
    • New cleanupfiles command deletes unreferenced files from both storage and database.
    • Extends the backup command to save backups directly to S3.
    • Image editor now supports viewing the original image in the preview dialog.
    • Markdown editor supports HTML attributes for code blocks.

    +2 more show less

    • Markdown editor adds a copy button for code blocks in preview.
    • Improves backup performance.

    7 details in Everything

14. 2026.29 May 6, 2026 · release notes

    SysReptor 2026.29 adds configurable SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. user identifiers, email-verified enforcement, and markdown autolink highlighting.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.29 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.29

    └──▷ USE IT
    Enforce email verification and set a custom user identifier claim when configuring a generic OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider.
    yaml copy

    OIDC_AUTHLIB_OAUTH_CLIENTS:
      myprovider:
        ...
        USER_IDENTIFIER_CLAIM: "sub"
        require_email_verified: true

    • Adds configurable user identifier claim for OIDC SSO, letting admins control which claim maps to the SysReptor user identity.
    • New require_email_verified setting for OIDC config enforces that only users with a verified email can authenticate via SSO.
    • Migrates Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. and Google SSO settings to the unified OIDC_AUTHLIB_OAUTH_CLIENTS configuration key.
    • Adds warnings when project user fields reference non-members, surfacing misconfigured assignments during report editing.
    • Markdown editor now syntax-highlights autolinks for improved readability.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Entra ID and Google SSO settings are migrated to OIDC_AUTHLIB_OAUTH_CLIENTS; existing configurations using the old provider-specific settings will break and must be updated.
15. advisory CVE-2026-42291 Apr 22, 2026 · issue 128
    • CVE-2026-42291: Read-write access to personal notes by sharing-link creation with no authorization in SysReptor Professional (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 6.8, affects >=2026.4;<2026.27)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
16. 2026.27 Apr 22, 2026 · release notes

    SysReptor 2026.27 adds an image pixelation tool and improves the markdown editor with task list toggles and frontmatter highlighting.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.27 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.27

    • Adds a pixelation tool to the image editor for redacting sensitive content in screenshots.
    • Supports toggling task list checkboxes directly in the markdown preview.
    • Adds frontmatter syntax highlighting in the markdown editor.

    3 details in Everything

17. 2026.25 Apr 15, 2026 · release notes

    SysReptor 2026.25 adds bulk actions in list views, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it.-based finding highlights, and AI field-label context.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.25 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.25

    └──▷ HOW TO FIND IT
    Quickly reassign or delete multiple findings at once instead of acting on them one by one.
    📍In the list view, check the checkboxes next to multiple findings, then select a bulk action (e.g. Delete or Move) from the bulk actions menu that appears in the list view header.
    Reorganise many notes at once by moving them to a different section of the notes tree in bulk.
    📍In the notes tree, select multiple notes using multi-select, then choose Move from the bulk actions menu and pick the destination node.
    • Highlights findings by CVSS score when the severity field is empty, giving instant visual risk triage.
    • Shows database version on the license info page for easier environment auditing.
    • Supports multi-select and bulk actions in list views for faster mass operations.
    • Supports bulk moving of items in the notes tree.
    • Adds a today button to the date picker in the UI.

    +3 more show less

    • Adds autocomplete hints to input fields across the UI.
    • AI agent now includes field labels in its context for more accurate assistance.
    • Adds a built-in design template for HTB COAE certification reports.

    8 details in Everything

18. 2026.21 Mar 24, 2026 · release notes

    SysReptor 2026.21 adds a Postgres upgrade script, auto-update support, and faster PDF download initiation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.21 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.21

    • Adds upgrade_postgres.sh script to upgrade the SysReptor database.
    • Enables auto-update configuration directly in install.sh.
    • Allows starting a PDF download while the preview is still loading.
    • Automatically scrolls to the current note in the tree view when navigating or after searching.
    • Switches PDF viewer to pdf.js legacy mode for broader compatibility.

    5 details in Everything

19. 2026.18 Mar 18, 2026 · release notes

    SysReptor 2026.18 adds an in-editor image editor and expands the AI agent with write_todos and subagent support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.18 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.18

    └──▷ HOW TO FIND IT
    Edit a screenshot or diagram inline while writing a pentest report, without leaving the Markdown editor.
    📍In the report editor, insert or select an image, then click the image editor toolbar icon to crop, annotate, or adjust the image directly in SysReptor.
    • Adds an image editor directly inside the Markdown editor for inline image manipulation during report writing.
    • Expands the AI agent with a write_todos tool for task tracking within the agent workflow.
    • Introduces AI subagents, enabling the AI agent to delegate to specialized sub-processes.

    3 details in Everything

20. 2026.12 Feb 25, 2026 · release notes

    SysReptor 2026.12 adds Jira export, ZAP scan import, per-section PDF rendering, and configurable report filenames.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.12 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.12

    └──▷ HOW TO FIND IT
    Export findings from a completed pentest report directly into Jira issues for remediation tracking.
    📍In the report, open the Jira plugin panel and trigger Export findings to Jira issues — see https://github.com/Syslifters/sysreptor/tree/main/plugins/jira#readme for configuration.
    Render only a single section (e.g. executive summary) to PDF mid-engagement without producing the full report.
    📍In the report, open the rendersections plugin and select the target section to render — see https://github.com/Syslifters/sysreptor/tree/main/plugins/rendersections#readme for setup.
    Automatically populate findings from an OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. ZAP scan instead of entering them manually.
    📍In the report findings view, use the scanimport plugin to import an OWASP ZAP scan output as findings.
    • Adds configurable filenames for generated PDF reports.
    • New jira plugin: export findings directly to Jira issues.
    • New rendersections plugin: render individual report sections to PDF without generating a full report.
    • New scanimport plugin: import OWASP ZAP scan results as findings.
    • Adds built-in design for HTB CWPE certification reports.

    +2 more show less

    • Enables virtual scrolling in the notes tree for improved performance with large note collections.
    • Disables the browsable API by default to reduce attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The browsable API is now disabled by default; any workflow or tooling that relied on browser-based API exploration will stop working unless it is explicitly re-enabled.
21. 2026.4 Jan 23, 2026 · release notes

    SysReptor 2026.4 adds sharing of personal notes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.4 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.4

    • Enables sharing of personal notes with other users.

    1 detail in Everything

22. 2026.1 Jan 21, 2026 · release notes

    SysReptor 2026.1 adds LaTeX math in Markdown, Mistral AI support, higher-res PDF charts, and images in Excalidraw notes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2026.1 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2026.1

    • Supports LaTeX math expressions in the Markdown editor for rendering equations in reports.
    • Adds Mistral AI as a provider option for the AI agent.
    • Increases resolution of charts and Mermaid diagrams exported to PDF.
    • Supports embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. images in Excalidraw notes.
    • Allows deleting users who are currently members of a project.

    5 details in Everything

23. 2025.108 Dec 17, 2025 · release notes

    SysReptor 2025.108 adds field duplication in editors and custom notification support via Django admin.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.108 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.108

    • Duplicate existing fields directly in the report/finding field editor, speeding up repetitive field setup.
    • Create custom notifications through the Django admin interface.

    2 details in Everything

24. advisory CVE-2025-66561 Dec 4, 2025 · issue 128
    • CVE-2025-66561: Authenticated Stored Cross-Site Scripting (XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session.) (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 7.3, affects <=2025.96)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
25. 2025.102 Dec 4, 2025 · release notes

    SysReptor 2025.102 adds an AI agent chat for report writing and configurable status transition rules.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.102 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.102

    • New AI agent chat assists pentesters with report writing directly inside the platform.
    • Supports configuring allowed status transitions to enforce custom report workflow rules.
    • Markdown editor gains a toolbar button for inserting inline code.
    • Comments now save on Enter, with Shift+Enter inserting newlines for easier note-taking.
    • The customizetheme plugin supports customizing the header logo height.

    5 details in Everything

26. 2025.96 Nov 19, 2025 · release notes

    SysReptor 2025.96 adds QR code generation in PDF reports and header logo customization via plugin.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.96 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.96

    • Supports QR code generation during PDF rendering for embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. links or metadata directly in report output.
    • Plugin customizetheme: Enables customization of the header logo.

    2 details in Everything

27. 2025.94 Nov 12, 2025 · release notes

    SysReptor 2025.94 adds commenting on shared notes/links and copy buttons for restoring archived projects.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.94 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.94

    • Adds ability to comment on shared notes and shared links.
    • Adds copy buttons for restoring archived projects.

    2 details in Everything

28. 2025.90 Oct 22, 2025 · release notes

    SysReptor 2025.90 adds retest status indicators, searchable finding references, and accessible PDF/UA generation.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.90 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.90

    └──▷ USE IT
    Enable PDF/UA accessible output so reports meet accessibility standards (e.g. WCAG/PDF/UA) required by some clients or regulations.
    ini copy

    GENERATE_ACCESSIBLE_PDFS=true

    • Adds retest status indicator to the finding list for at-a-glance retest tracking.
    • Supports generating accessible PDF/UA files via the GENERATE_ACCESSIBLE_PDFS config option.
    • Markdown editor: finding reference insertion is now searchable, speeding up cross-referencing.
    • Markdown editor: sticky header in nested fields keeps context visible while editing deep structures.
    • Improves warning location reporting during PDF rendering for easier design debugging.

    +1 more show less

    • Improves finding grouping in design preview data for more accurate design previews.

    6 details in Everything

29. advisory CVE-2025-59945 Sep 26, 2025 · issue 128
    • CVE-2025-59945: Privilege Escalation by Authenticated Users (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 8.1, affects 2024.74-2025.81)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
30. 2025.83 Sep 26, 2025 · release notes

    SysReptor 2025.83 suggests previously used tags across filters, projects, designs, and templates.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.83 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.83

31. 2025.80 Sep 24, 2025 · release notes

    SysReptor 2025.80 adds native Excalidraw notes, username auto-complete in comments, custom PostgreSQL schema support, and more.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.80 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.80

    └──▷ USE IT
    Use a dedicated PostgreSQL schema to isolate SysReptor's tables within a shared database instance.
    yaml copy

    DATABASE_SCHEMA=sysreptor

    • Adds native Excalidraw diagramming directly into SysReptor core, replacing the need for the separate excalidraw plugin.
    • Supports importing notes into the design default note structure.
    • Enables custom PostgreSQL schema configuration via the DATABASE_SCHEMA environment variable.
    • Adds username auto-complete when writing comments.
    • Introduces case-sensitive TODO marker parsing.

    +1 more show less

    • Updates the HTB CBBH design to the new HTB CWES design.

    6 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The excalidraw plugin is deprecated; installations relying on the excalidraw plugin should migrate to the new built-in Excalidraw notes in SysReptor core.
32. 2025.74 Sep 11, 2025 · release notes

    SysReptor 2025.74 adds a scan import plugin and tightens user account security requirements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.74 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.74

    • New scanimport plugin enables importing scan results from various security tools directly into reports.
    • Requires an email address when creating new users.
    • Requires a different password when users change their password.
    • Switches CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. script-src to use a nonce instead of a hash, improving content security policycontent security policyA browser security mechanism, standardized by the W3C, that lets a web server declare via HTTP headers which sources of scripts, styles, and other resources a page is allowed to load, blocking unauthorized content injection. flexibility.

    4 details in Everything

33. 2025.69 Aug 13, 2025 · release notes

    SysReptor 2025.69 adds Markdown report export via new plugin and collapsible plugin menu.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.69 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.69

    └──▷ HOW TO FIND IT
    Export a completed pentest report as a Markdown ZIP archive for version-control or offline review.
    📍In the report view, open the Plugin menu and select markdownexport to download the report as a Markdown ZIP document.
    • New markdownexport plugin exports reports as Markdown documents packaged in ZIP format.
    • Allows collapsing the plugin menu in the UI for a cleaner workspace.
    • Adds logging of backup started and finished times for auditability.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Bitnami Redis Docker image is replaced with the official Redis image; deployments relying on the Bitnami image will need to update their container configuration.
34. 2025.64 Jul 30, 2025 · release notes

    SysReptor 2025.64 adds Excalidraw diagramming, custom finding statuses, PDF outline view, and richer markdown editing.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.64 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.64

    └──▷ USE IT
    Define custom finding/section statuses to match your team's workflow instead of using the defaults.
    yaml copy

    # In your SysReptor configuration (e.g. app.env or docker-compose override):
    # See https://docs.sysreptor.com/setup/configuration/#custom-statuses
    CUSTOM_STATUSES='{"finding": [{"id": "in-review", "label": "In Review", "color": "#FFA500"}]}'

    • New excalidraw plugin integrates Excalidraw diagramming directly into SysReptor.
    • Supports customizing finding and section statuses via configuration.
    • Limits publicly accessible settings exposed in API responses.
    • Adds option to skip restoring files when running the restorebackup command.
    • PDF viewer now includes a PDF outline (table of contents) view.

    +2 more show less

    • Markdown editor converts pasted HTML (e.g. Excel tables, Word content) to markdown automatically.
    • Markdown editor adds a blockquote button to the toolbar.

    7 details in Everything

35. 2025.56 Jun 17, 2025 · release notes

    SysReptor 2025.56 adds bulk note management, CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. hierarchy in PDFs, and incremental markdown parsing.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.56 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.56

    • Adds incremental parsing in the markdown editor for faster, more responsive editing.
    • New user setting to disable local login, enabling enforcement of external authentication.
    • Provides parent CWEsCWEsA community-maintained list of software and hardware weakness types, maintained by MITRE, that gives cyber tools a standard taxonomy for classifying and communicating vulnerability root causes. in PDF rendering, giving fuller vulnerability classification context in reports.
    • Enables copying of individual notes within projects.
    • Supports bulk delete and bulk export of notes for faster note management at scale.

    +1 more show less

    • Adds multi-select in the notes tree UI for operating on multiple notes at once.

    6 details in Everything

36. 2025.50 May 28, 2025 · release notes

    SysReptor 2025.50 adds sync scroll in the markdown editor, arrow-key PDF navigation, and several UI improvements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.50 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.50

    • Adds synchronized scrolling between the markdown editor and its preview pane.
    • Enables arrow-key navigation in the PDF viewer.
    • Adds a button to expand collapsed sidebar menus.
    • Adds a shortcut indicator to the save comments action.

    4 details in Everything

37. 2025.43 May 7, 2025 · release notes

    SysReptor 2025.43 adds project update notifications, a reworked PDF viewer, and expanded spellcheck language support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.43 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.43

    • Adds in-app notifications for project updates, keeping team members informed of changes in real time.
    • Reworked and updated PDF viewer for improved report review within the UI.
    • Enables spellchecking for all supported languages, no longer restricted to PREFERRED_LANGUAGES.
    • Keeps the assignee field visible on small screens instead of hiding it.

    4 details in Everything

38. 2025.37 Apr 17, 2025 · release notes

    SysReptor 2025.37 adds email support and forgot-password self-service for local users.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.37 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.37

    └──▷ HOW TO FIND IT
    Enable email delivery so users can receive forgot-password reset links.
    📍In the admin console, go to Setup › Configuration › Emails and configure your SMTP server settings.
    • Enables outbound email sending for SysReptor instances (configurable via setup).
    • Adds forgot-password functionality for local user accounts.

    2 details in Everything

39. 2025.29 Mar 26, 2025 · release notes

    SysReptor 2025.29 adds findings grouping and a plugin development guide.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.29 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.29

    • Enables grouping of findings within reports for better organization.
    • New plugin development guide in documentation to support custom extensions.

    2 details in Everything

40. 2025.25 Mar 19, 2025 · release notes

    SysReptor 2025.25 adds webhook-on-update events, API comment ranges, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. username support, and member search in projects.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.25 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.25

    └──▷ TRY IT
    Anchor a new comment to a specific text range in a report section via the API.
    copy

    $ curl -X POST https://<sysreptor-host>/api/v1/projects/<project-id>/comments/ \
      -H 'Authorization: Bearer <token>' \
      -H 'Content-Type: application/json' \
      -d '{"text": "Review this finding carefully.", "text_range": {"from": 10, "to": 45}}'

    • Plugin renderfindings: supports rendering finished/published projects.
    • Plugin webhooks: triggers webhook events on resource updates (in addition to creation).
    • New sync indicator in the UI shows synchronization status.
    • Refined publish project page in the UI.
    • API now accepts text_range when creating comments, enabling precise in-document comment anchoring.

    +3 more show less

    • Allows searching for member usernames in the project list.
    • Toggle comment shortcut now available in the HTML/CSS editor.
    • SSO: preferred_username accepted as a user identifier alongside email.

    8 details in Everything

41. 2025.20 Mar 5, 2025 · release notes

    SysReptor 2025.20 adds a createapitoken command, configurable number field limits, in-UI settings editing, and per-finding PDF rendering.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.20 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.20

    └──▷ TRY IT
    Automate API token provisioning for CI/CD pipelines or service accounts without going through the UI.
    copy

    $ python manage.py createapitoken

    • New createapitoken CLI command for programmatic API token creation.
    • Restrict system users from accessing projects, templates, and designs.
    • Configure minimum and maximum values for number fields in report templates.
    • View and edit application settings directly in the web UI.
    • View and edit plugin settings directly in the web UI.

    +2 more show less

    • Plugin renderfindings gains an option to render findings as separate PDFs.
    • Improved note tree sorting via drag-and-drop in the UI.

    7 details in Everything

42. 2025.12 Jan 27, 2025 · release notes

    SysReptor 2025.12 adds find-and-replace in markdown, improved sharing, and per-user profile colors.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.12 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.12

    • Adds find-and-replace functionality across markdown fields in reports and notes.
    • Enables searching within findings and sections.
    • Supports configuring individual user profile colors.
    • Adds option to disable archiving for specific project members.
    • Renders markdown preview in a web worker for improved editor responsiveness.

    +5 more show less

    • OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user.: uses preferred_username as login_hint during re-authentication.
    • Accepts username from environment variable in the createorupdateuser command.
    • Improves project design selection by ordering choices by usage count.
    • Shows tooltips on list action buttons when permissions are missing.
    • No longer automatically logs users in via OIDC (or other SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.) immediately after logout.

    10 details in Everything

43. 2025.4 Jan 14, 2025 · release notes

    SysReptor 2025.4 adds a single-finding PDF renderer, HTB CAPE design, and random password generation for fields.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2025.4 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2025.4

    • New renderfindings plugin renders a single finding to PDF without generating a full report.
    • New built-in design for HTB CAPE certification reporting.
    • Adds a button to generate random passwords directly in password fields.
    • New manage.py command to reset the project number counter via the projectnumber plugin.
    • Warns about relative URLs in PDFs during the rendering phase to catch broken asset links early.

    +1 more show less

    • Shared notes now default to markdown preview mode for read-only shares and autofocus the root note.

    6 details in Everything

44. 2024.96 Dec 4, 2024 · release notes

    SysReptor 2024.96 adds webhook and auto-numbering plugins, background task scheduling, and richer comment UX.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.96 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.96

    • New plugin: trigger webhooks on specific project/reporting events.
    • New plugin: automatically assign sequential project numbers.
    • Supports running periodic tasks in the background.
    • Adds user-level option to force a password change on next login.
    • Enables marking previously resolved comments as open again.

    +2 more show less

    • New keyboard shortcut Ctrl+Alt+M to create comments from the UI.
    • New keyboard shortcut Ctrl+Enter to save comment text from the UI.

    7 details in Everything

45. 2024.91 Nov 20, 2024 · release notes

    SysReptor 2024.91 ships an experimental plugin system with CyberChef, GraphQL Voyager, and Hash Identifier plugins, plus PDF rendering controls.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.91 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.91

    • Introduces an experimental plugin system for extending SysReptor functionality.
    • Adds bundled plugins: CyberChef (data encoding/decoding), GraphQL Voyager (schema visualization), and Hash Identifier.
    • Enables cancellation of in-progress PDF rendering requests.
    • Enforces a PDF rendering timeout (default: 5 minutes) on self-hosted installations.
    • Displays PDF render timing information in the UI.

    +2 more show less

    • Always strips metadata from generated PDFs.
    • Adds a button to download the preview PDF directly.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Static file compression is disabled.
46. 2024.79 Oct 15, 2024 · release notes

    SysReptor 2024.79 adds granular file storage settings, CSPCSPContent Security Policy: a browser security mechanism, standardized by the W3C, that lets a web server declare which sources of scripts, styles, and other resources a page may load, blocking injection attacks. trusted types, and markdown editor enhancements.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.79 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.79

    • Adds more granular file storage settings for finer control over where and how files are stored.
    • Adds trusted types configuration to Content Security PolicyContent Security PolicyA browser security mechanism, standardized by the W3C, that lets a web server declare via HTTP headers which sources of scripts, styles, and other resources a page is allowed to load, blocking unauthorized content injection. for stronger XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. mitigations.
    • New markdown editor toolbar button to reference findings directly from the editor.
    • Markdown editor now shows a markdown snippet in image preview dialogs for quick copy-paste embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG..

    4 details in Everything

47. 2024.74 Sep 24, 2024 · release notes

    SysReptor 2024.74 adds public note sharing and a new Project Admin permission role.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.74 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.74

    • Enables public sharing of notes, allowing practitioners to share findings or notes externally without full report access.
    • Adds a new Project Admin permission level for finer-grained access control within projects.

    2 details in Everything

48. 2024.63 Aug 7, 2024 · release notes

    SysReptor 2024.63 adds note search in the frontend UI.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.63 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.63

    └──▷ HOW TO FIND IT
    Quickly locate specific notes across a project without manually browsing through them.
    📍In the SysReptor UI, navigate to the Notes section and use the new search bar to query note content by keyword.
    • Enables searching notes directly in the frontend interface.

    1 detail in Everything

49. 2024.60 Jul 31, 2024 · release notes

    SysReptor 2024.60 adds a setting to disable WebSockets and force HTTP for collaborative editing.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.60 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.60

50. 2024.57 Jul 10, 2024 · release notes

    SysReptor 2024.57 adds combobox value suggestions and image preview navigation in markdown editors.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.57 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.57

    • Suggests values used in other findings for combobox fields
    • Allows navigating through images in the enlarged markdown image preview dialog

    2 details in Everything

51. 2024.55 Jul 4, 2024 · release notes

    SysReptor 2024.55 adds finding duplication, PDF compression, backup management, and collaborative editing improvements

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.55 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.55

    • markdown_text fields on findings and sections now accept comments
    • Web interface gains Create Backup button for manual backups
    • Web interface displays backup history for existing backups
    • API token objects store last_usage_date tracking field
    • Findings can now be duplicated from the web interface

    +2 more show less

    • PDFs generated by SysReptor are compressed to reduce file sizes
    • Collaborative editing uses Redis as the channels layer instead of PostgreSQL

    7 details in Everything

52. 2024.49 Jun 18, 2024 · release notes

    New templates API creation flow enables immediate image uploads and new cookie Secure flag.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.49 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.49

    • Sets Secure flag for cookies when setting SECURE_SSL_REDIRECT=on
    • Immediately create new templates in API to allow image uploads on first editing

    2 details in Everything

53. 2024.43 May 27, 2024 · release notes

    Adds sorting lists in SysReptor UI, collaborative diff history, API text diffs, and revert button

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.43 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.43

    • sort query parameters for projects, templates, designs, and users list endpoints to control column and direction.
    • Collaborative editing support in project history diff views.
    • Revert changes button added to the markdown editor within project history diff views.
    • update_text API events now transmit the text diff object rather than replacing the entire field value.

    4 details in Everything

54. advisory CVE-2024-36076 May 21, 2024 · issue 128
    • CVE-2024-36076: Cross-Site Websocket Hijacking in SysReptor (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 6.8, affects >= 2024.28 <= 2024.30)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
55. 2024.40 May 15, 2024 · release notes

    Adds collaborative editing for project findings and sections with HTTP fallback.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.40 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.40

    • ALLOWED_HOSTS setting for request host and origin validation

    1 detail in Everything

56. 2024.28 Apr 10, 2024 · release notes

    Adds collaborative editing with live cursor/selection visibility in notes; persists Encrypt PDF setting via local storage.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.28 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.28

    • Add form-action directive to Content Security PolicyContent Security PolicyA browser security mechanism, standardized by the W3C, that lets a web server declare via HTTP headers which sources of scripts, styles, and other resources a page is allowed to load, blocking unauthorized content injection.
    • Remember Encrypt PDF setting in browser's local storage

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed unsafe-inline from the script-src directive in the Content Security Policy, which may block inline scripts or styles that rely on it.
57. 2024.19 Mar 5, 2024 · release notes

    SysReptor v2024.19 adds PDF render timeout config, finding template duplication, and markdown editor file metadata

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.19 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.19

    • Add pdf.worker.timeout configuration key to set the PDF rendering timeout for reports when using a separate worker.
    • New duplicate-finding-template action allows cloning existing findings without manual re-entry.
    • Added filename visibility in markdown editor for uploaded files.

    3 details in Everything

58. 2024.16 Feb 22, 2024 · release notes

    2024.16 adds cover page component to PDF designer, multi-selection in markdown editor, and HackTheBox CWEE design

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.16 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.16

    └──▷ HOW TO FIND IT
    Insert a cover page into a PDF report layout using the designer's component palette.
    📍In the PDF Designer, search for and drag the cover component onto your layout
    Select multiple elements in the markdown editor to copy or delete them simultaneously.
    📍Click the first element, hold Shift/Ctrl, and click additional elements in the markdown editor
    Apply the HackTheBox CWEE theme to a new or existing report.
    📍In the report settings, select HackTheBox CWEE from the Design dropdown
    • Adds cover component for use in the PDF designer layout editor to include cover pages
    • Enables multi-selection in the markdown editor
    • Adds a new HackTheBox CWEE design option

    3 details in Everything

59. 2024.13 Feb 14, 2024 · release notes

    Adds CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. field type, custom tag hint, and task list/footnote buttons to markdown editor

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.13 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.13

    └──▷ HOW TO FIND IT
    Map a vulnerability finding directly to its CWE identifier in a new report field.
    📍Steps: Open the report field selector in the editor, choose CWE as the field type, and enter the relevant CWE ID (e.g., CWE-79).
    Insert a task list or footnote without typing raw markdown syntax.
    📍Steps: Click the new task list or footnote button in the markdown editor toolbar while composing a report section.
    • Add CWE field type for vulnerability mapping in reports
    • Add UI hint explaining how to add custom tags in the report editor

    2 details in Everything

60. 2024.10 Jan 25, 2024 · release notes

    SysReptor 2024.10 adds note structure definition and notes export/import capabilities

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.10 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.10

    • defines initial note structure for projects in designs
    • allows exporting and importing notes

    2 details in Everything

61. 2024.8 Jan 23, 2024 · release notes

    Adds diff-view for version history, readonly form fields, and improved template field UI.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.8 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.8

    • Diff-view for version history is now available to compare changes between report versions
    • Form fields can be set readonly instead of disabled, allowing users to view but not edit specific data points without disabling the input entirely
    • Improved template field overview UI provides better visibility when designing complex reports

    3 details in Everything

62. 2024.1 Jan 8, 2024 · release notes

    SysReptor 2024.1 adds dark mode, new design/status/tags fields, and UI enhancements

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2024.1 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2024.1

    • dark mode enabled in the UI
    • Add status and tags fields to designs
    • Falls back to severity when CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. is undefined in template list

    3 details in Everything

63. 2023.145 Dec 11, 2023 · release notes

    New configuration options for list fields and markdown diagram support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2023.145 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2023.145

    • Add regex config key to .sysreptor/config.yaml to define patterns for list item validation
    • Add sort_items boolean option to .sysreptor/config.yaml to enable sorting in report list fields
    • Support mermaid diagrams in markdown content

    3 details in Everything

64. 2023.142 Nov 21, 2023 · release notes

    SysReptor 2023.142 adds CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 4.0 support, new API endpoint for HTML rendering, and Regex validation for string fields

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2023.142 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2023.142

    └──▷ TRY IT
    Retrieve project findings where markdown descriptions are converted to HTML for web display.
    copy

    $ GET /api/projects/{project_id}/data

    • CVSS 4.0 support is added to the tool's vulnerability data models.
    • New API endpoint allows accessing project data with markdown fields rendered to HTML.
    • Supports validating string fields with RegEx patterns in the designer configuration.

    3 details in Everything

65. 2023.136 Oct 30, 2023 · release notes

    SysReptor 2023.136 updates frontend stack and fixes UI behaviors

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2023.136 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2023.136

    • Updates frontend technology stack to Vue3, Nuxt3, Vuetify3, and Typescript for the core application interface.
    • Updates the PDF generation library WeasyPrint to version 60.

    2 details in Everything

66. 2023.122 Sep 7, 2023 · release notes

    SysReptor 2023.122 adds note assignment and proxy configuration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2023.122 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2023.122

    • Adds Assign notes to users capability allowing attribution of findings or comments.
    • Enables use of host proxy config in docker-compose containers via updated container settings.

    2 details in Everything

67. 2023.119 Aug 24, 2023 · release notes

    Adds configurable finding sort order, manual ordering override, enum choice ordering, global template search, Ctrl+J shortcut, and improved UI list views.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2023.119 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2023.119

    • Configure finding sort order in design
    • Allow manual ordering of findings by overriding the default sort order
    • Allow ordering of enum choices in design field definition
    • Search in all fields for template search
    • Add shortcut for creating new findings and notes (Ctrl+J)

    +2 more show less

    • UI: sticky header and searchbar in list views
    • UI: increase file drop area for importing projects, designs and templates

    7 details in Everything

68. 2023.114 Aug 9, 2023 · release notes

    Adds CLI backup restore command, PDF export for notes, and CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. data in designs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 2023.114 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 2023.114

    └──▷ USE IT
    Restore a previously backed up configuration or data state via the command line.
    shell copy

    sysreptor backup restore <backup-file>

    Generate a PDF document of your assessment notes for offline sharing or archiving.
    shell copy

    sysreptor export notes --format pdf

    • Add CLI command to restore backups
    • Expose more CVSS information in designs (including CVSS version, base/temporal/environmental score, impact/exploitability subscores)

    2 details in Everything

69. 0.110 Jul 31, 2023 · release notes

    Multilingual templates, image support, creation from findings, and UI refinements

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.110 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 0.110

    └──▷ HOW TO FIND IT
    Create a template based on a specific finding to reuse its structure.
    📍In the findings list, select a finding and choose Create Template from Finding.
    Insert an image into a report template for visual clarity.
    📍In the template editor, use the new image insertion control to upload or link an asset.
    • Adds multilingual template support to allow managing content in multiple languages
    • Enables inserting images into templates via a new capability
    • Adds the ability to create templates directly from existing findings
    • Moves secondary toolbar actions into a dropdown menu for better UI organization
    • Adds a sticky Add button in finding and note list sidebars for easier navigation

    5 details in Everything

70. 0.101 Jul 5, 2023 · release notes

    SysReptor 0.101 adds authentication via API tokens and auto-generated OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. schema

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.101 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 0.101

    └──▷ TRY IT
    Obtain a token and use it to make an authenticated request to the SysReptor API.
    copy

    $ curl -H "Authorization: Bearer <api-token>" https://<sysreptor-host>/api/v1/endpoint

    View the auto-generated OpenAPI schema to discover available endpoints and data models.
    copy

    $ curl https://<sysreptor-host>/openapi.json

    • Use Argon2 for hashing passwords instead of PBKDF2 is a security improvement to the built-in password storage mechanism.
    • Enables Authentication via API tokens, allowing programmatic access to the SysReptor service.
    • Auto-generates the OpenAPI schema for the API, providing accurate documentation for integration.

    3 details in Everything

71. 0.95 Jun 21, 2023 · release notes

    Adds tag support, SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. via Remote-User, auto-archive/delete settings, and drag-and-drop PDF designer to SysReptor 0.95.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.95 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 0.95

    • Add tags to projects
    • Support SSO via Remote-User HTTP header

    2 details in Everything

72. 0.87 May 24, 2023 · release notes

    Adds <ref>, <markdown>, @import support to designer templates, new lodash utilities, and Google OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. integration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.87 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 0.87

    • Adds <ref> component to designs to reference headings, figures, tables and findings
    • Support writing markdown inside design HTML templates via <markdown> component
    • Support markdown attrs for headings
    • Provide lodash utility functions in design template
    • Provide (optional) base styles in designer via @import "/assets/global/base.css";

    +1 more show less

    • Add settings for OIDC with Google

    6 details in Everything

73. 0.83 May 12, 2023 · release notes

    Adds PREFERRED_LANGUAGES config and user deletion via UI

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 0.83 https://github.com/Syslifters/sysreptor.git
    # already have the repo? check out this version:
    $ git checkout 0.83

    └──▷ HOW TO FIND IT
    Navigate the admin console to remove a user account directly from the interface.
    📍In the UI, navigate to Users and select Delete for the target account.
    • Allow configuring languages via setting PREFERRED_LANGUAGES environment variable
    • Allow deleting users via UI

    2 details in Everything