| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-06-16 | 752 Bytes | |
| v8.2.1 source code.tar.gz | 2026-06-16 | 344.7 kB | |
| v8.2.1 source code.zip | 2026-06-16 | 382.5 kB | |
| Totals: 3 Items | 727.9 kB | 3 | |
What's Changed
- SECURITY: Cassettes are now loaded with a safe YAML loader, preventing arbitrary code execution when a cassette from an untrusted source is loaded. Previously a crafted cassette containing a Python object tag (e.g.
!!python/object/apply:os.system) would execute code on load, including via the normalvcr.use_cassette()path. Existing cassettes (including file-upload/streaming bodies) continue to load. Advisory: GHSA-rpj2-4hq8-938g — thanks @RamiAltai and @EQSTLab for the reports. - Validate
record_modeand raise a clear error on an invalid value (#208) - Recommend pytest-recording over the unmaintained pytest-vcr in the docs (#986)
Full Changelog: https://github.com/kevin1024/vcrpy/compare/v8.2.0...v8.2.1