Professional / Community 2021.4.2

Summary: PortSwigger released Burp Suite Professional/Community 2021.4.2 on 22 April 2021, adding a native Logger tool for logging global and per-task traffic, turning HTTP/2 support on by default, and updating the embedded browser to Chromium 90.0.4430.85 to fix several security issues Google classified as high. The release also lets users save embedded browser settings and history, configure message editor search defaults, disable Repeater's line ending normalization for request smuggling tests, and add custom CNAME and TXT DNS records in Burp Collaborator.
Why it matters: The embedded browser update addresses Chromium flaws Google rated high, so anyone testing with an older Burp build is running a browser with known high-severity issues. The new per-task logging also gives teams a way to see what a scan was doing when it behaves unexpectedly.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026