Msgpack

Latest version: v1.0.8

Safety actively analyzes 628918 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 7

0.6.0

======

Release Date: 2018-11-30

This release contains some backward incompatible changes for security reason (DoS).

Important changes
-----------------

* unpacker: Default value of input limits are smaller than before to avoid DoS attack.
If you need to handle large data, you need to specify limits manually. (319)

* Unpacker doesn't wrap underlying ``ValueError`` (including ``UnicodeError``) into
``UnpackValueError``. If you want to catch all exception during unpack, you need
to use ``try ... except Exception`` with minimum try code block. (323, 233)

* ``PackValueError`` and ``PackOverflowError`` are also removed. You need to catch
normal ``ValueError`` and ``OverflowError``. (323, 233)

* Unpacker has ``strict_map_key`` option now. When it is true, only bytes and str
(unicode in Python 2) are allowed for map keys. It is recommended to avoid
hashdos. Default value of this option is False for backward compatibility reason.
But it will be changed True in 1.0. (296, 334)

Other changes
-------------

* Extension modules are merged. There is ``msgpack._cmsgpack`` instead of
``msgpack._packer`` and ``msgpack._unpacker``. (314, 328)

* Add ``Unpacker.getbuffer()`` method. (320)

* unpacker: ``msgpack.StackError`` is raised when input data contains too
nested data. (331)

* unpacker: ``msgpack.FormatError`` is raised when input data is not valid
msgpack format. (331)

0.5.6

Not secure
======

* Fix fallback.Unpacker.feed() dropped unused data from buffer (287)
* Resurrect fallback.unpack() and _unpacker.unpack().
They were removed at 0.5.5 but it breaks backward compatibility. (288, 290)

0.5.5

Not secure
======

* Fix memory leak in pure Python Unpacker.feed() (283)
* Fix unpack() didn't support `raw` option (285)

0.5.4

Not secure
======

* Undeprecate ``unicode_errors`` option. (278)

0.5.3

Not secure
======

* Fixed regression when passing ``unicode_errors`` to Packer but not ``encoding``. (277)

0.5.2

Not secure
======

* Add ``raw`` option to Unpacker. It is preferred way than ``encoding`` option.

* Packer.pack() reset buffer on exception (274)

Page 3 of 7

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.