Professional / Community 2025.3.4

Summary: PortSwigger released Burp Suite Professional and Community 2025.3.4 as a stable build on Wednesday, 7 May 2025 at 12:37 UTC. The release upgrades Burp's embedded browser to Chromium 136.0.7103.49 on Windows and Mac and 136.0.7103.59 on Linux, and fixes two bugs: requests sent to audit from certain tools were included without insertion points, and users could not save a copy of a temporary project after running an Intruder attack with a pre-configured word list.
Key Takeaway: The Chromium bump moves the browser bundled into the testing toolkit that many security teams run against production web applications, so the engine under their scans changes with this release. The audit bug meant some requests reached the scanner with no insertion points, which can leave parts of a target untested without the operator noticing.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026