Skip to content

Version 0.3.2

Latest

Choose a tag to compare

@gmazoyer gmazoyer released this 01 Oct 22:15
· 9 commits to main since this release
f1545e4

Require PyJWT 2.15.0 or later, which fixes CVE-2026-101918 (GHSA-42vr-xj54-vc7v). pyixapi decodes tokens without a signature check, which is the path that this vulnerability affects.

Also require requests 2.33.0 or later, which fixes CVE-2026-25645. pyixapi now accepts all PyJWT 2.x versions.