Professional / Community 2021.3.2

Summary: PortSwigger released Burp Suite Professional/Community 2021.3.2 on 17 March 2021, turning HTTP/2 support on by default and no longer treating it as experimental. The release says Burp will interact with targets via HTTP/2 when a target supports it, bringing a significant performance improvement to the network layer for Scanner and Intruder, plus several minor improvements and bug fixes.
Why it matters: Scanner and Intruder speed now depends on HTTP/2 being enabled by default, and the release notes flag future compatibility with any site that no longer supports HTTP/1.1 - so teams that disable it under Project Options / HTTP are choosing slower scans and a coming compatibility gap.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026