- Latest release
- 1.7.1 (Oct 27, 2026): no advisory affects it
- Newest unaffected release
- 1.7.1 (Oct 27, 2026), the latest release
- Advisories
- 1 · 1 critical
- Weekly downloads
- 76
- Dependents
- 0
- Releases
- 28 since 0.4.0 (Jan 31, 2024)
- Registry
- PyPI
- Releases read
- Nov 9, 2026
Version timeline
- CVE-2026-123870Affects 0.9.0 to 1.3.1 (1.3.2 is outside it)
Advisories 1
- CVE-2026-123870Critical 9.5
[Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when…
Affected: from 0.9.0, fixed in 1.3.2.
Fixed in 1.3.2 (released May 7, 2026, 186 days before disclosure).
The latest release, 1.7.1, is not affected.