Article

dennys246/Maxim releases pymaxim 1.3.2 "Decomposition"

pymaxim 1.3.2 "Decomposition" is released, fixing high-severity security advisory GHSA-7qh4-mp34-88v9: previously a leader ran without authentication by default and debug routes could be read through a cloudflared tunnel; 1.3.2 changes to fail-closed by default, and each leader must run pip install --upgrade pymaxim on its own machine and cold restart.

Part of the event: pymaxim 1.3.2 fixes high-severity unauthenticated vulnerability

This page provides a summary and source link only.