Skip to content

UPinar/contrastapi

v1.34.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 29d MCP Security & Auth
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai-agents ai-security api claude claude-desktop-extension cve
+13 more
security domain-recon email-security llm-tools mcp mcpb mitre-atlas mitre-d3fend model-context-protocol osint sigma-rules threat-intelligence vulnerability-management

Affected surfaces

deps

Summary

AI summary

Updates Dependency upgrades, Tests, and Surface across a mixed release.

Full changelog

Maintenance release rolling up the dependency upgrades since v1.34.2. No HTTP
route, response schema, or MCP tool changes — purely a refreshed,
security-patched dependency stack.

Dependency upgrades

  • starlette 1.0.0 → 1.3.1 — upstream form-parsing limit enforcement and
    URL/host-handling fixes (field/size bounds now applied to urlencoded forms;
    safer request.url host parsing).
  • fastapi 0.136.3 → 0.138.0 — adapts internal route introspection to the
    0.137 router refactor.
  • cryptography 48.0.1 → 49.0.0 — latest upstream security maintenance.
  • mcp 1.28.0, pytest 9.1.1, actions/checkout 7 (CI).

Tests

  • Full suite green: 2579 passed.
  • The scan-route registration test now asserts against the public OpenAPI
    contract (stable across FastAPI route-internals changes) with a spec-wide
    operationId-uniqueness guard.

Surface (unchanged)

  • 54 MCP tools, 7 Resources, 3 Prompts. No tool/schema/endpoint change;
    MCP Registry / indexer refresh not required.

Security Fixes

  • cryptography upgraded to 49.0.0 — latest upstream security maintenance.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track UPinar/contrastapi

Get notified when new releases ship.

Sign up free

About UPinar/contrastapi

Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.

All releases →

Related context

Earlier breaking changes

  • v1.33.11 `bulk_sigma_rule_lookup` now costs 1 credit per `rule_id`, changing from flat 1 credit/call.

Beta — feedback welcome: [email protected]