Repository navigation

Fix RCE: refuse object-dtype arrays in msgpack deserialization - #49

Merged

nicholas9182 merged 6 commits into

devfrom

fix/serializer-pickle-rce

Sep 29, 2026

Merged

Fix RCE: refuse object-dtype arrays in msgpack deserialization#49
nicholas9182 merged 6 commits into
devfrom
fix/serializer-pickle-rce

Commits on Sep 29, 2026
- Fix RCE: refuse object-dtype arrays in msgpack deserialization
  
  0x1r1s
  and
  claude
  committed
  f760207
- Bump version to 0.2.24 and add changelog for the RCE fix
  
  0x1r1s
  and
  claude
  committed
  792be67
- Bump version to 0.2.25
  
  0x1r1s
  and
  claude
  committed
  637ca54
- Bump version to 0.2.26
  
  0x1r1s
  and
  claude
  committed
  fea9b4d
- Merge branch 'dev' into fix/serializer-pickle-rce
  nicholas9182
  authored
  8a8e40d
- Merge branch 'dev' into fix/serializer-pickle-rce
  nicholas9182
  authored
  d9ad29a