| 100 | BUG: java.util.ConcurrentModificationException thrown in Modules 5 and 6 (Directory Enumerator, File Enumerator) | New |
| 102 | BUG (?): Session ID entropy and ASP.NET | New |
| 103 | Replace proxy's SSL cert, include Grendel-Scan name | Accepted |
| 128 | Test TRACE against known valid URLs, not just / | New |
| 129 | BUG: POST proxy requests not tested or sent through upstream proxy | New |
| 142 | Implicit whitelist regex must have a trailing slash | New |
| 151 | BUG: Meta redirection tags not handled | New |
| 153 | BUG: Comment lister may be listing null comments | New |
| 157 | Bug: Underscore in hostname doesn't work | New |
| 171 | Test encoding consistency in query parameter names | New |