Prowler Releases

Great

Activity Score

90%

Great

Recency:83%

Cadence:83%

Completeness:100%

Health:100%

Recent Updates

Prowler 5.39.1

Aug 18, 2026

Prowler 5.39.0

Aug 13, 2026

Prowler 5.38.0

Aug 6, 2026

Prowler 5.37.1

Aug 4, 2026

Prowler 5.37.0

Aug 3, 2026

Prowler 5.36.0

Jul 29, 2026

Updates for July 17, 2026(2 updates)

Jul 17, 2026

Prowler 5.33.2

Jul 14, 2026

Prowler 5.33.1

Jul 10, 2026

Uniform Changelog API

Access Prowler changelog updates through our uniform API. Same JSON structure across all sources — no adapter-specific parsing needed.

API Endpoint

GET https://watchchangelog.com/api/v1/entries?source=prowler.releases

Response Sample

{
  "source": "prowler.releases",
  "vendor": "Prowler",
  "id": "tag:github.com,2008:Repository/66474729/5.39.1",
  "published_at": "2026-08-18T10:03:33.000Z",
  "title": "Prowler 5.39.1",
  "url": "https://github.com/prowler-cloud/prowler/releases/tag/5.39.1",
  "summary": "API 🔄 Changed Bump alibabacloud-tea-openapi to 0.4.6, oci to 2.184.1 and pyopenssl to 26.4.0 to match the SDK; the cryptography override now names its actual blockers (azure-cli-core pins msal below 1.37, workos 8.3.0 requires cryptography 48) (#12477) 🐞 Fixed Pin zstd to 1.5.7.2; 1.5.7.3 was yanked from PyPI as not thread safe (#12477) 🔐 Security Trivy from v0.72.0 to v0.73.0 in the container image, fixing HIGH CVE-2026-46600 in the bundled golang.org/x/net (#12445) Trivy v0.74.0 and Debian util-linux 2.41.5-0+deb13u1 in the API container image, patching Go standard library vulnerabilities and CVE-2026-53615 (#12470) SDK 🐞 Fixed Bump alibabacloud-tea-openapi to 0.4.6, oci to 2.184.1 and pyopenssl to 26.4.0 so the published wheel installs with cryptography 50.0.0; 5.38.0 declared cryptography 50.0.0 while those packages capped it below 50, so pip could not install it and pip install prowler silently fell back to 5.37.1 (#12477) Pin zstd to 1.5.7.2; 1.5.7.3 was yanked from PyPI as not thread safe (#12477) ECS task-definition checks no longer report PASS when DescribeTaskDefinition fails before container evidence is gathered (#12478) ses_identity_not_publicly_accessible now evaluates every SES identity authorization policy and marks mixed public Allow and Deny statements for manual review (#12480) 🔐 Security Trivy from v0.72.0 to v0.73.0 in the container image, fixing HIGH CVE-2026-46600 in the bundled golang.org/x/net (#12445) Trivy v0.74.0 and Debian util-linux 2.41.5-0+deb13u1 in the SDK container image, patching Go standard library vulnerabilities and CVE-2026-53615 (#12470)",
  "tags": [
    "Prowler",
    "prowler.releases",
    "security",
    "compliance",
    "cloud-auditing"
  ]
}