4.1.0

New issue

Open

No due date

•Last updated Nov 1, 2026

Backwards-compatible features and enhancements. Merge only after 4.0.1 is tagged, so 4.0.1 stays fixes-only.

0% complete

fix: replace redundant new String() constructors with literals (#999)
Unread
#1090 opened Oct 29, 2026 · Updated Nov 1, 2026
Modernize module iframes while preserving dashboard flow (#914)
Unread
#920 opened Sep 17, 2026 · Updated Nov 3, 2026
12
Wire up userLock brute-force protection (stored procedure exists but is unused)
OWASP/SecurityShepherd#824 · opened on Mar 31, 2026 · 4.1.0
Move to a single main branch and retire dev and master
OWASP/SecurityShepherd#1084 · opened on Oct 28, 2026 · 4.1.0
Set up the databases with scripts on stock MariaDB/MongoDB images instead of custom images
OWASP/SecurityShepherd#1046 · opened on Oct 25, 2026 · 4.1.0
3
Setup guide should start if core database can't be found
OWASP/SecurityShepherd#521 · opened on Nov 17, 2019 · 4.1.0
[Enhancement] Ability to view only Web App or Mobile Levels when in Admin -> Module Management -> Open / Close Modules
Feature
OWASP/SecurityShepherd#682 · opened on Jul 21, 2022 · 4.1.0
2
Setup never seeds MongoDB: executeMongoScript uses the removed eval command
OWASP/SecurityShepherd#986 · opened on Oct 24, 2026 · 4.1.0
Replace brittle Tomcat server.xml/web.xml patches with a robust mechanism
OWASP/SecurityShepherd#848 · opened on May 29, 2026 · 4.1.0
[BUG] Building Web Container Image fails: "Can't rename file ... server.xml ... Invalid argument
OWASP/SecurityShepherd#753 · opened on Mar 24, 2023 · 4.1.0
1
Rewrite and re-enable SetupIT's disabled testNoCoreDatabase / testNoMysqlResource
OWASP/SecurityShepherd#1073 · opened on Oct 26, 2026 · 4.1.0
1
[Enhancement] Order levels by name in Admin -> Module Management -> Open / Close Modules
OWASP/SecurityShepherd#681 · opened on Jul 21, 2022 · 4.1.0
1
Keep the NoSQL level closed when MongoDB is not configured
OWASP/SecurityShepherd#1102 · opened on Nov 1, 2026 · 4.1.0

Issues