List view

Fix Qualys parser collapsing findings with same QID but different por…

conflicts-detected

docs

parser

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14528

#14528 In DefectDojo/django-DefectDojo;

· tejas0077 opened on Mar 15, 2026

Fix missing username in uWSGI logs when using API Token authenticatio…

conflicts-detected

settings_changesNeeds changes to settings.py based on changes in settings.dist.py included in this PRNeeds changes to settings.py based on changes in settings.dist.py included in this PR

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14527

#14527 In DefectDojo/django-DefectDojo;

· tejas0077 opened on Mar 15, 2026

fix: pass username strings instead of Dojo_User objects to create_not…

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14927

#14927 In DefectDojo/django-DefectDojo;

· donhluca opened on May 27, 2026

Add SonarQube SCA (Software Composition Analysis) API Import Support

parser

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14710

#14710 In DefectDojo/django-DefectDojo;

· mathiasconradt opened on Apr 19, 2026

Upcoming changes to the Bitnami catalog (effective August 28th, 2025)

help_wantedWe would welcome a community contribution on thisWe would welcome a community contribution on this

Status: Open.

#12834 In DefectDojo/django-DefectDojo;

· sjedlick opened on Jul 22, 2025

Prefetcher updates

apiv2

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14964

#14964 In DefectDojo/django-DefectDojo;

· dogboat opened on Jun 5, 2026

add organization and product type articles

docs

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14961

#14961 In DefectDojo/django-DefectDojo;

· dangoelz opened on Jun 4, 2026

Include analysis.detail from Dependency Track FPF in finding description

parser

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14931

#14931 In DefectDojo/django-DefectDojo;

· webdevred opened on May 28, 2026

Fix Tenable hash code calculation by removing dynamic description fie…

docs

settings_changesNeeds changes to settings.py based on changes in settings.dist.py included in this PRNeeds changes to settings.py based on changes in settings.dist.py included in this PR

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14529

#14529 In DefectDojo/django-DefectDojo;

· tejas0077 opened on Mar 15, 2026

Split CI/CD-related infrastructure into its own model

affects_proPRs that affect Pro and need a coordinated release/merge moment.PRs that affect Pro and need a coordinated release/merge moment.

New MigrationAdding a new migration file. Take care when merging.Adding a new migration file. Take care when merging.

ui

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15002

#15002 In DefectDojo/django-DefectDojo;

· dogboat opened on Jun 12, 2026

feat: allow import/reimport to wait for deduplication to complete

affects_proPRs that affect Pro and need a coordinated release/merge moment.PRs that affect Pro and need a coordinated release/merge moment.

apiv2

conflicts-detected

docs

New MigrationAdding a new migration file. Take care when merging.Adding a new migration file. Take care when merging.

settings_changesNeeds changes to settings.py based on changes in settings.dist.py included in this PRNeeds changes to settings.py based on changes in settings.dist.py included in this PR

ui

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15007

#15007 In DefectDojo/django-DefectDojo;

· valentijnscholten opened on Jun 14, 2026

chore(deps): update docker/setup-buildx-action action from v4.0.0 to v4.1.0 (.github/workflows/release-x-manual-tag-as-latest.yml)

dependenciesPull requests that update a dependency filePull requests that update a dependency file

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14991

#14991 In DefectDojo/django-DefectDojo;

· renovate opened on Jun 10, 2026

chore(deps): bump json-log-formatter from 1.1.1 to 1.2.1

dependenciesPull requests that update a dependency filePull requests that update a dependency file

pythonPull requests that update Python codePull requests that update Python code

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14994

#14994 In DefectDojo/django-DefectDojo;

· dependabot opened on Jun 10, 2026

refactor(reorg): extract every type of class into modules [10/10]

apiv2

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14987

#14987 In DefectDojo/django-DefectDojo;

· valentijnscholten opened on Jun 9, 2026

feat(helm): add Gateway API HTTPRoute and External Secrets Operator support

helm

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14985

#14985 In DefectDojo/django-DefectDojo;

· jonasschultheiss opened on Jun 9, 2026

Add Garak (NVIDIA LLM vulnerability scanner) parser

docs

parser

settings_changesNeeds changes to settings.py based on changes in settings.dist.py included in this PRNeeds changes to settings.py based on changes in settings.dist.py included in this PR

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15013

#15013 In DefectDojo/django-DefectDojo;

· Dashtid opened on Jun 15, 2026

chore(deps): bump cryptography from 46.0.7 to 48.0.1

dependenciesPull requests that update a dependency filePull requests that update a dependency file

pythonPull requests that update Python codePull requests that update Python code

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15018

#15018 In DefectDojo/django-DefectDojo;

· dependabot opened on Jun 15, 2026

replace bleach with nh3 for HTML sanitization

affects_proPRs that affect Pro and need a coordinated release/merge moment.PRs that affect Pro and need a coordinated release/merge moment.

docs

integration_tests

parser

ui

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14442

#14442 In DefectDojo/django-DefectDojo;

· valentijnscholten opened on Mar 4, 2026

chore(deps): bump python-gitlab from 8.3.0 to 8.4.0

dependenciesPull requests that update a dependency filePull requests that update a dependency file

pythonPull requests that update Python codePull requests that update Python code

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14956

#14956 In DefectDojo/django-DefectDojo;

· dependabot opened on Jun 4, 2026

chore(deps): bump django-permissions-policy from 4.30.0 to 4.31.0

dependenciesPull requests that update a dependency filePull requests that update a dependency file

pythonPull requests that update Python codePull requests that update Python code

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15027

#15027 In DefectDojo/django-DefectDojo;

· dependabot opened on Jun 17, 2026

chore(deps): bump cryptography from 46.0.7 to 49.0.0

dependenciesPull requests that update a dependency filePull requests that update a dependency file

pythonPull requests that update Python codePull requests that update Python code

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15029

#15029 In DefectDojo/django-DefectDojo;

· dependabot opened on Jun 17, 2026

chore(deps): bump pyopenssl from 26.2.0 to 26.3.0

dependenciesPull requests that update a dependency filePull requests that update a dependency file

pythonPull requests that update Python codePull requests that update Python code

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15032

#15032 In DefectDojo/django-DefectDojo;

· dependabot opened on Jun 17, 2026

fix(ui): use brand color tokens instead of hardcoded hex in new UI

ui

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14999

#14999 In DefectDojo/django-DefectDojo;

· ksitton58 opened on Jun 10, 2026

refactor(ui): use design tokens instead of hardcoded colors on new lo…

ui

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 14998

#14998 In DefectDojo/django-DefectDojo;

· ksitton58 opened on Jun 10, 2026

perf(dedupe): skip unchanged rows, VALUES fast-write, prefetch vulnerability_ids

affects_proPRs that affect Pro and need a coordinated release/merge moment.PRs that affect Pro and need a coordinated release/merge moment.

settings_changesNeeds changes to settings.py based on changes in settings.dist.py included in this PRNeeds changes to settings.py based on changes in settings.dist.py included in this PR

unittests

Status: Open (in progress).

DefectDojo/django-DefectDojonumber 15046

#15046 In DefectDojo/django-DefectDojo;

· valentijnscholten opened on Jun 19, 2026