Broadcom Symantec Endpoint Protection 2.0.8 Release

[staleb-r7]

🎫 Ticket

Resolve CVE-2026-69244 in rapid7/insightconnect-plugins

🧩 Type of Change

• Bug fix

🧠 Background & Motivation

A security scan flagged CVE-2026-69244 (Use After Free) in aiohttp==3.14.1 in plugins/broadcom_symantec_endpoint_protection/requirements.txt. A fix is available; bumping to the latest release clears it.

✨ What Changed

• aiohttp bumped 3.14.1 → 3.14.3
• Plugin version bumped 2.0.7 → 2.0.8

CVE	Title	Fixed In
CVE-2026-69244	Use After Free	aiohttp 3.14.3

🧪 Testing

• 3 unit tests passed on SDK-matched Python 3.13.13
• insight-plugin refresh regenerated cleanly
• Container smoke test: image built and started cleanly in HTTP mode (gunicorn Listening/Booting worker, no traceback)
• Staging integration tests (run on branch push)

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.