CLI 6.34.59
June 16th, 2026
[6.34.59] - 2026-06-15
Added
- eMASS API commands (
emass_api) for POA&M, control, milestone, and artifact synchronization are now available - eMASS XML import now uploads referenced artifact files to the System Security Plan when they are present alongside the export
- Per-asset Issue/POAM creation for Prisma Cloud and Qualys scans when issueCreation is set to PerAsset, creating a separate record for each vulnerability-asset pair
- Configurable on-disk caching of Qualys KnowledgeBase data between syncs via qualysKbCacheHours
Changed
- eMASS integration now targets the RegScale v2 API for all platform operations
- Qualys vulnerability enrichment now fetches KnowledgeBase details in targeted batches instead of downloading the entire KnowledgeBase, with truncated responses followed to completion
Fixed
- eMASS control synchronization now resolves NIST control acronyms so control implementations push to eMASS as Test Results
- eMASS POA&M push and artifact upload now send correctly formatted requests instead of failing validation
- eMASS XML import no longer silently skips artifacts; missing artifact files are reported in the import summary
- Prisma Cloud CVE deduplication now links consolidated vulnerabilities to every affected asset instead of only the first
- Vulnerability imports now warn when records have no asset identifier instead of silently skipping asset linkage
- Qualys syncs with a single KnowledgeBase result no longer fail to parse
- Qualys sync progress now shows one task per phase instead of one per asset
- Resolved a dependency conflict that could corrupt installations when optional extras are installed
- CLI startup crash caused by a NumPy 1.x/2.x version mismatch after upgrading; numpy, pandas, and pyarrow are now pinned to compatible versions
- Updated aiohttp and pyjwt to patched releases that address known security vulnerabilities
