Download Latest Version v8.3.0 source code.zip (390.2 kB)
Email in envelope

Get an email when there's a new version of VCR.py

Home / v8.2.1
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-06-16 752 Bytes
v8.2.1 source code.tar.gz 2026-06-16 344.7 kB
v8.2.1 source code.zip 2026-06-16 382.5 kB
Totals: 3 Items   727.9 kB 3

What's Changed

  • SECURITY: Cassettes are now loaded with a safe YAML loader, preventing arbitrary code execution when a cassette from an untrusted source is loaded. Previously a crafted cassette containing a Python object tag (e.g. !!python/object/apply:os.system) would execute code on load, including via the normal vcr.use_cassette() path. Existing cassettes (including file-upload/streaming bodies) continue to load. Advisory: GHSA-rpj2-4hq8-938g — thanks @RamiAltai and @EQSTLab for the reports.
  • Validate record_mode and raise a clear error on an invalid value (#208)
  • Recommend pytest-recording over the unmaintained pytest-vcr in the docs (#986)

Full Changelog: https://github.com/kevin1024/vcrpy/compare/v8.2.0...v8.2.1

Source: README.md, updated 2026-06-16