Professional / Community 2022.9
Summary: PortSwigger released version 2022.9 of Burp Suite on 5 September 2022, introducing the Montoya API for developing Burp extensions alongside the existing Wiener API, which will eventually lose support. The release also adds automatic renewal of expiring license keys and adaptive request throttling, where Burp Scanner adds incremental delays after a 429 response until it complies with the server's rate limit.
Key Takeaway: Extensions built on the Wiener API will eventually lose support, so teams maintaining custom Burp tooling face a migration to Montoya. And the new throttling behavior lengthens scans by default unless adaptive request throttling is deselected in the scan configuration.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026