This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 1mo
Monitoring & Metrics
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
anomaly-detection
battery
bms
can-bus
dbc
electric-vehicle
+9 more
ev
grafana
j1939
lstm
machine-learning
prometheus
python
quality-assurance
soh-prediction
Affected surfaces
rce_ssrf
deps
Summary
AI summaryUpdates Chemistry Data Fixes, Thermal Runaway Detection, and Security Hardening across a mixed release.
Full changelog
What's Changed
Chemistry Data Fixes
- LFP thermal runaway: 120°C → 250°C (matches LiFePO4 datasheet)
- NMC thermal runaway: 80°C → 150°C, gas venting: 70°C → 120°C
- NCA thermal runaway: 75°C → 140°C, gas venting: 65°C → 120°C
- NMC/NCA overdischarge: 2.7V → 2.5V
- NMC/NCA cell_min_voltage: 3.0V → 2.5V
- OCV curves: Fixed boundary values for LFP (2.00→2.50V), NMC/NCA (2.50→3.00V), added missing 95% SOC points
- LFP gas venting: 90°C → 130°C
Thermal Runaway Detection
- Critical temp threshold: 65°C → 85°C (realistic trigger point)
- High temp threshold: 55°C → 65°C
- Critical dT/dt: 5°C/min → 10°C/min (reduces false positives)
- Removed double temperature penalty in risk_score calculation
- Added confidence clamping to [0.0, 1.0] range
Battery Scoring
- Rebalanced weights: THERMAL 0.15→0.25, ANOMALY 0.25→0.15 (sum=1.0)
Security Hardening
- dbc_parser.py: Added path traversal protection (realpath + extension check)
- analysis.py: Added 100MB file size limit on joblib.load (anti-RCE)
- framework.py: Added input data copy to prevent caller mutation
- config.py: Lowered critical_soh threshold 70% → 50% (industry standard)
Test Corrections
- Updated 47 tests across 4 test files to match corrected values
- All 948 tests passing
Security Fixes
- dbc_parser.py: Added realpath + extension check to prevent path traversal.
- analysis.py: Enforced a 100MB file size limit on joblib.load to mitigate RCE risks.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About EV-QA-Framework
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]