UPinar/contrastapi

v1.34.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo MCP Security & Auth

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai-agents ai-security api claude claude-desktop-extension cve

+13 more

security domain-recon email-security llm-tools mcp mcpb mitre-atlas mitre-d3fend model-context-protocol osint sigma-rules threat-intelligence vulnerability-management

Affected surfaces

deps

Summary

AI summary

Crypto Pro payments now auto‑provision within a tolerance and operators receive notifications for payment states.

Full changelog

Crypto billing — resilient payment provisioning

Crypto Pro payments are now provisioned automatically when the received
amount is within a small tolerance of the invoice (covering exchange and
network rounding), instead of requiring an exact-amount settlement.
Genuine underpayments and failed/expired/refunded payments are left
unprovisioned and surfaced to operators. Amounts are validated from the
signature-verified provider notification.

Operational visibility

Operator notifications added for underpaid / failed / expired / refunded
payments and for successful key claims.

Dependencies / security

cryptography 48.0.0 → 48.0.1 (GHSA-537c-gmf6-5ccf)
beautifulsoup4 → >=4.15.0

Tests

2579 passing. Wire-compatible — no API contract, MCP tool (54),
Resource (7) or Prompt (3) changes.

Security Fixes

dep: GHSA-537c-gmf6-5ccf — upgraded cryptography from 48.0.0 to 48.0.1

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track UPinar/contrastapi

Get notified when new releases ship.

About UPinar/contrastapi

Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.

All releases →

Related context

Related tools

Earlier breaking changes

v1.33.11 `bulk_sigma_rule_lookup` now costs 1 credit per `rule_id`, changing from flat 1 credit/call.