Download Latest Version 4.3.3 source code.zip (338.4 kB)
Email in envelope

Get an email when there's a new version of Zeep

Home / 4.3.3
Name Modified Size InfoDownloads / Week
Parent folder
4.3.3 source code.tar.gz 2026-06-18 258.6 kB
0
4.3.3 source code.zip 2026-06-18 338.4 kB
1 1 weekly downloads
README.md 2026-06-18 709 Bytes
0
Totals: 3 Items   597.7 kB 1

Highlights

  • Wire up the forbid_external setting (previously defined but unused since the move off defusedxml in 4.0). When enabled, zeep refuses to transitively fetch http/https resources via xsd:import, xsd:include, wsdl:import or lxml entity resolution, raising zeep.exceptions.ExternalReferenceForbidden. The user-supplied entry-point WSDL/schema URL is still loaded. The default remains False to preserve existing behaviour; enable it when loading WSDLs from untrusted sources to mitigate SSRF via attacker-controlled import targets.

Internal

  • Tooling only (no runtime changes): migrated dependency/build management to uv and replaced isort/flake8/black with ruff.
Source: README.md, updated 2026-06-18