Skip to main content
This page lists active platform limitations and recommended administrative workarounds.

Active Advisories

1. Very Large OpenAPI Specs (> 10 MB)

  • Issue: Importing OpenAPI JSON definitions exceeding 10 MB may cause browser UI lag during interactive catalog parsing.
  • Workaround: Split large monolithic specs into functional sub-collections or import via the REST API using the --async flag.

2. Cloudflare Zero Trust Bot Protection

  • Issue: When scanning web applications behind Cloudflare Zero Trust with aggressive managed bot challenges, automated scanner traffic may receive 403 challenge pages.
  • Workaround: Add a custom bypass WAF rule in Cloudflare matching Snapsec’s scanner IP pool or specific custom header token.