UPinar/contrastapi

v1.34.6 Security

This release includes 4 security fixes for security teams reviewing exposed deployments.

Published 24d MCP Security & Auth

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 4 known CVEs

Topics

ai-agents ai-security api claude claude-desktop-extension cve

+13 more

security domain-recon email-security llm-tools mcp mcpb mitre-atlas mitre-d3fend model-context-protocol osint sigma-rules threat-intelligence vulnerability-management

Affected surfaces

deps

Summary

AI summary

Updates Dependency upgrades, Tests, and Surface across a mixed release.

Full changelog

Maintenance release rolling up dependency upgrades since v1.34.5. No HTTP
route, response schema, or MCP tool changes — purely a refreshed,
security-patched dependency stack. pip-audit now reports zero known
vulnerabilities for the installed set.

Dependency upgrades (dependabot #55–#58)

fastapi 0.138.0 → 0.138.1 (starlette stays pinned at 1.3.1)
mcp 1.28.0 → 1.28.1
click 8.4.1 → 8.4.2
phonenumbers 9.0.32 → 9.0.33

Transitive pins (new in requirements.txt)

These are pulled in by mcp/httpx/CacheControl and are invisible to
dependabot (not previously in the manifest); pinned explicitly to their
patched versions after a pip-audit sweep:

pyjwt == 2.13.0 — clears PYSEC-2026-175…179
pydantic-settings == 2.14.2 — clears GHSA-4xgf-cpjx-pc3j
idna == 3.15 — clears PYSEC-2026-215
msgpack == 1.2.1 — clears GHSA-6v7p-g79w-8964

Tests

Full suite green: 2602 passed; ruff clean; pip-audit: no known
vulnerabilities.

Surface (unchanged)

54 MCP tools, 7 Resources, 3 Prompts. No tool/schema/endpoint change.

Security Fixes

pyjwt upgraded to 2.13.0 — clears PYSEC-2026‑175…179
pydantic-settings upgraded to 2.14.2 — clears GHSA-4xgf-cpjx-pc3j
idna upgraded to 3.15 — clears PYSEC-2026‑215
msgpack upgraded to 1.2.1 — clears GHSA-6v7p-g79w-8964

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track UPinar/contrastapi

Get notified when new releases ship.

About UPinar/contrastapi

Security intelligence API with 31 MCP tools for CVE/EPSS/KEV lookup, domain recon (DNS/WHOIS/SSL/subdomains/CT logs), IOC/threat intel, OSINT (email/phone/username), and code security scanning (secrets, injection). Free 100 req/hr.

All releases →

Related context

Related tools

Earlier breaking changes

v1.33.11 `bulk_sigma_rule_lookup` now costs 1 credit per `rule_id`, changing from flat 1 credit/call.