Mwdb-core

Latest version: v2.12.0

Safety actively analyzes 631215 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 6

2.6.0post1

Release made to create correct Docker image for v2.6.0 version by fixed CI workflow

2.6.0

Not secure
**Key changes**:

- **Support for OpenID Connect authentication**
You can play with it using our development setup: https://github.com/CERT-Polska/mwdb-core/blob/master/dev/oidc/README.md
- **JSON values in attributes**
Whole objects can be stored as attribute value instead of single string. In future: we plan to implement template-based rich formatting to visually represent these objects in tables, lists, collapsible trees etc.
- **New Attribute API** - better designed API for accessing attriibutes that supersedes old Metakey API

**New features and improvements**:

- Transactional tag adding during upload. Now you can upload your file and related tags within the same request (https://github.com/CERT-Polska/mwdb-core/commit/7b05dfb21d981342acb1506fbbb1cc4008c337bd)
- `comment_author:` search field that allows to search for objects commented by selected user (https://github.com/CERT-Polska/mwdb-core/pull/454)
- `upload_count:` search field that allows to search for objects related with more than N different user uploads. (https://github.com/CERT-Polska/mwdb-core/pull/466)
- `multi:` search field that allows to search for multiple hashes separated by spaces (https://github.com/CERT-Polska/mwdb-core/pull/470)
- MWDB stores all file names that object appeared with, not only the first one (https://github.com/CERT-Polska/mwdb-core/pull/482)
- Introduced server-side statement timeout, along with customizable client-side timeouts (currently hardcoded to 8 seconds for general Web requests and 60 seconds for file upload from Web)

**Bugfixes and improvements**:

- **Fixed faulty login/recover password page that responds with `Session expired` instead of actual error** (https://github.com/CERT-Polska/mwdb-core/pull/461)
- **Fixed password recover in `Settings` page when administrator wants to send new password link to different user** (https://github.com/CERT-Polska/mwdb-core/pull/475)
- **Fixed race conditions resulting in ISE 500 on adding/removing the same tags concurrently** (https://github.com/CERT-Polska/mwdb-core/pull/459)
- Correct handling of missing API endpoint when static files are served by Flask (https://github.com/CERT-Polska/mwdb-core/pull/472)
- Fixed ISE 500 when non-UUID value was passed to `karton` attribute (https://github.com/CERT-Polska/mwdb-core/pull/474)
- Fixed wrong type conflict check during object upload (https://github.com/CERT-Polska/mwdb-core/pull/477)
- `karton:<uuid>` search field supports single wildcard to filter out not analyzed samples (https://github.com/CERT-Polska/mwdb-core/pull/451)
- CRC32 hash is zero-padded to 8 bytes (https://github.com/CERT-Polska/mwdb-core/pull/495)
- Added mouseover text for attribute keys (https://github.com/CERT-Polska/mwdb-core/pull/490)

2.6.0dev1

CI pipeline testing before the actual stable v2.6.0 release.

2.5.1

Not secure
**Bugfixes**:

- Plugins were not built correctly in Docker environments due to change from `npm install` to `npm ci` in Dockerfile. That change was reverted (https://github.com/CERT-Polska/mwdb-core/pull/449)

2.5.0

Not secure
Release focused on Karton integration bugfixes and small improvements

**New features and improvements**:
- Added support for AWS IAM authentication for Minio (https://github.com/CERT-Polska/mwdb-core/pull/443, thanks alex-ilgayev!)
- Built-in Karton integration allows to bind Karton analyses that doesn't origin from MWDB (https://github.com/CERT-Polska/mwdb-core/pull/430, https://github.com/CERT-Polska/mwdb-core/pull/436)

**Bugfixes**:
- Fixed handling of escape characters contained in config field and referenced by search query (https://github.com/CERT-Polska/mwdb-core/pull/437)
- Fixed scrollbar issues in react-ace component (https://github.com/CERT-Polska/mwdb-core/pull/441)
- Fixed `requests` package dependency conflict (https://github.com/CERT-Polska/mwdb-core/pull/440)

2.4.0

Not secure
Small release that includes minor improvements of existing features.

**New features and improvements**:
- API keys have names in addition to UUID identifier, so user can describe the purpose of API key (420)
- Web: DagreD3Plot and SwaggerUI components are lazy-loaded, so the main JS bundle is much smaller. This should boost the loading time of MWDB webapp (418, 427)
- User can delete all attributes under the same key via single API request. This is mainly a workaround for deletion of attribute values that are too long for URI query part of DELETE request. (426)

**Bugfixes**:
- Web: Multiple bugfixes in recent objects (417):
- Fix for `Number of results does not display after making a query using URL` (404)
- RecentView doesn't ask the server for count of all objects when query field is cleared
- Improved component stability

Page 3 of 6

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.