- Latest release
- 2.2.2 (Oct 28, 2026): no advisory affects it
- Newest unaffected release
- 2.2.2 (Oct 28, 2026), the latest release
- Advisories
- 1 · 1 critical
- Weekly downloads
- 1,062
- Dependents
- 0
- Releases
- 71 since 1.1.2 (May 24, 2026)
- Registry
- PyPI
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-61732Affects 1.1.2 to 1.1.16 (1.1.17 is outside it)
Advisories 1
- CVE-2026-61732Critical 10.0
Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context
Affected: fixed in 1.1.17.
Fixed in 1.1.17 (released Jun 24, 2026, 92 days before disclosure).
The latest release, 2.2.2, is not affected.