Lucent Sky AVM version 2512 release notes

2026/02/02 |

Lucent Sky AVM version 2512 releases

Lucent Sky AVM version 2512 MR

New features in 2512 MR

Technology stack

  • Support for .NET 10
  • Support for Java 25
  • Support for PHP 8.5
  • Support for Python 3.14

Weakness policies

  • Support for CWE 4.19.1
  • Support for CWE Top 25 2025
  • Support for OWASP Top 10 2025

Pre-analysis and build

  • New parsing and lexing infrastructure

    A new unified parsing and lexing infrastructure has been introduced to enable more accurate and consistent code analysis across all supported languages. This redesigned foundation provides more accurate handling of modern language features across supported languages, such as those introduced in recent versions of C#, Dart, ECMAScript, Python, and others. While the new infrastructure offers greater accuracy and extensibility, it may introduce a slight performance regression in limited scenarios. Parsing and lexing performance is expected to improve over the next two releases as the new infrastructure being optimized.

Binary analysis

  • General improvements in the .NET and Java binary analysis engines

Source code analysis

  • General improvements in the Bash, C/C++, C#, ECMAScript, Go, Java, PHP, PowerShell, Python, Ruby, and VB.NET source code analysis engines

Dependency analysis

  • Improved dependency discovery and analysis for binary files built with .NET, C/C++, Go, Java, and Rust
  • Expanded license observation coverage
  • Improved vulnerability identification algorithms
  • Performance improvements on the dependency analysis engine

Remediation

  • General improvements in the remediation engines
  • General improvements in ML-augmented vulnerability remediation and explanations

Reporting

  • Improved secure score calculation algorithms
  • Support for CycloneDX 1.7 SBOM generation

Interfaces

  • Support for Visual Studio 2026 and recent versions of Eclipse, IntelliJ, and Visual Studio Code

Issues fixed in 2512 MR

  • We fixed a bug where long statements might be cut off on PDF reports
  • We fixed a bug where the charts in report might show incorrect number of results when remediation is disabled
  • We fixed a bug where real-time intelligence updates might fail when network latency is exceedingly high

Breaking changes in 2512 MR

  • Result hash

    Breaking change. The new parsing and lexing infrastructure uses more information to generate the hash of a result. While this change increases hash specificity and sensitivity, some result hashes might change. As a result, some suppression signatures generated by previous versions of Lucent Sky AVM might no longer be recognized by version 2512 and later.

  • SBOM generation

    Potentially breaking change. The file names for generated CycloneDX SBOM and SPDX SBOM have been changed to Report.cdx.json and Report.spdx.json in 2512 MR.

  • Visual Studio integration

    Potentially breaking change. Using Lucent Sky AVM for Visual Studio in Visual Studio 2015 is no longer supported. Lucent Sky AVM for Visual Studio might work for Visual Studio 2015 and older versions of Visual Studio, but such scenarios are not supported.