Caido v0.55.0
Ian Bouchard
•
January 23, 2026
2 min read
This release introduces workflow string interpolation, a new extra field to pass data to JS workflow nodes, import/export capabilities for Match & Replace and Findings, and more SDK functionality for better plugin integration.
🔥 Workflow String Interpolation
Workflows now support string interpolation using <% %> syntax, allowing you to dynamically insert values into workflow node text fields.
Example: You can use this syntax to inject the HTTP method from a previous step directly into a Finding description:
The server returns 200 when passing the HTTP method: <% my_node_alias.request.getMethod() %>
🛠️ New Extra Input in Javascript Nodes
JavaScript nodes now support an extra input field. This allows you to easily pass multiple inputs into the JS node and perform more complex operations.
📤 Import/Export Match & Replace Rules and Findings
You can now import and export Match & Replace collections and Findings to share rules and findings with your team, between instances and between projects.
👩💻 Developer Features
🎨 Frontend SDK
- Added the following functionality:
sdk.ai.getUpstreamProviders()sdk.automate.addResponseViewMode()sdk.automate.getSessions()sdk.automate.getEntries()sdk.automate.addEntryIndicator()sdk.files.onUploadedHostedFile()sdk.files.onUpdatedHostedFile()sdk.files.onDeletedHostedFile()sdk.findings.addResponseViewMode()sdk.httpHistory.addResponseViewMode()sdk.intercept.addResponseViewMode()sdk.matchReplace.addRuleIndicator()sdk.replay.addResponseViewMode()sdk.replay.addSessionIndicator()sdk.search.addResponseViewMode()sdk.settings.addToSlot()sdk.sitemap.onEntryChildStateUpdate()sdk.sitemap.getTreeEntries()sdk.sitemap.getChildren()sdk.sitemap.addResponseViewMode()sdk.sitemap.addEntryIndicator()sdk.window.getContext()sdk.window.onContextChange()
🛠️ Backend SDK
- Added the following functionality:
sdk.events.onUpstream()sdk.meta.id()sdk.net.connect()RequestSpec.getInfo()RequestSpec.getUrl()RequestSpecRaw.getInfo()RequestSpecRaw.toSpec()
- Added the following modules:
https
🔥 Features
- #2007: Conditional view modes in frontend SDK
- #457: Export/import Match & Replace collections
- #1008: Output from Shell node into JS Node
- #1017: Specify a default collection for "Send to replay"
- #1305: Templating Inside of Description for Create Finding Workflow Node
- #1452: Findings - String Interpolation in Finding Description
- #1801: Save the state of expanded nodes in the Sitemap
- #1820: Add custom view modes for response editors
- #1887: Add option to disable SSL verification in plugin backend fetch
- #1994: Get the currently selected request ID
- #2000: SDK function to add icons in replay tree view
- #2013: Import / Export Findings
- #2014: Frontend SDK: a way to check if user has AI api keys setup & validate them
- #2041: Allow plugins to modify upstream request and connection
- #2044: Add optional usage analytics
🐛 Bug Fixes
- #1608: Race condition when replay task is completed before startTask ends
- #1304: Get Data Out of Shell Node
- #1553: Sitemap slow with domains
- #1584: Scope update fails silently
- #1892: Missing style sanitization in finding description preview
- #1947: Shift + enter should add a newline in httpql search bar
- #1986: Overlap of component in findings
- #2005: Unable to delete uploaded files with failed status
- #2020: Broken link in login page
- #2042: Replay History selection doesn't persist on reload
- #2050: Client Hello with magic bytes other than 0x16 0x03 0x01 do not work
- #2052: Placeholder range doesn't update with body