Active Advisories
1. Very Large OpenAPI Specs (> 10 MB)
- Issue: Importing OpenAPI JSON definitions exceeding 10 MB may cause browser UI lag during interactive catalog parsing.
- Workaround: Split large monolithic specs into functional sub-collections or import via the REST API using the
--asyncflag.
2. Cloudflare Zero Trust Bot Protection
- Issue: When scanning web applications behind Cloudflare Zero Trust with aggressive managed bot challenges, automated scanner traffic may receive 403 challenge pages.
- Workaround: Add a custom bypass WAF rule in Cloudflare matching Snapsec’s scanner IP pool or specific custom header token.