Skip to content

v0.5.1: Security Fixes

Choose a tag to compare

View all tags
@bdamokos bdamokos released this 09 Jan 19:27
· 10 commits to main since this release
v0.5.1
This tag was signed with the committer’s verified signature.
bdamokos
GPG key ID: 10A8A2D027232D7F
Verified
Learn about vigilant mode.
c0a80dd
This commit was signed with the committer’s verified signature.
bdamokos
GPG key ID: 10A8A2D027232D7F
Verified
Learn about vigilant mode.

Security Fixes

CVE-2024-47081 Fix

  • Bumped minimum requests version to 2.32.4 to address CVE-2024-47081
    • This vulnerability allowed URL parsing to leak .netrc credentials to malicious hosts
    • CVSS Score: 5.3 (Medium severity)

Git History Cleanup

  • Removed .env file from git history
    • The .env file was accidentally committed in early commits
    • History has been rewritten to remove this file completely
    • If you're a collaborator, you may need to re-clone the repository

Version Updates

  • Updated version to 0.5.1
  • Updated all version references in pyproject.toml, requirements.txt, and init.py

For full details, see the CHANGELOG.

Assets 2
Loading