v1.2.1 - Security Patch Release

mxcoppell released this 04 Jan 00:06

· 11 commits to main since this release

89a7fdc

🔒 Security Patch Release

This release addresses multiple critical and high-severity security vulnerabilities in dependencies.

🚨 Critical Vulnerabilities Fixed

CVE-2025-66418 (urllib3): Unbounded decompression chain vulnerability
CVE-2025-66471 (urllib3): Streaming API compression handling issue

⚠️ High Severity Vulnerabilities Fixed

CVE-2025-53643 (aiohttp): HTTP request smuggling vulnerability

📦 Dependencies Updated

Package	Previous	Updated	Severity
urllib3	2.3.0	2.6.2	Critical
aiohttp	3.11.13	3.13.3	High
requests	2.32.3	2.32.5	Medium
black (dev)	23.12.1	24.10.0	Medium

✅ Verification

All 338 tests passing
No breaking changes
Backward compatible

📝 Full Changelog

See CHANGELOG.md for complete details.

⬆️ Upgrade Instructions

pip install --upgrade tradestation-api-python

Or with poetry:

poetry update tradestation-api-python

Assets 2