- Latest release
- 2.2.0 (Nov 1, 2026): no advisory affects it
- Newest unaffected release
- 2.2.0 (Nov 1, 2026), the latest release
- Advisories
- 1 · 1 high
- Weekly downloads
- 441
- Dependents
- 0
- Releases
- 27 since 0.4.8 (Aug 16, 2026)
- Registry
- PyPI
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-108372No published release is affectedNo published release is affected
Advisories 1
- CVE-2026-108372High 7.1
LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files
Affected: from 0.0.1, fixed in 0.4.5.
Fixed in 0.4.8 (released Aug 16, 2026, 61 days before disclosure, the advisory names 0.4.5, which was never published).
The latest release, 2.2.0, is not affected.