Skip to content

Security

Security advisories for halfORM, and where to report a vulnerability.

For what halfORM checks on your behalf and what your application has to handle itself — which does not change from one release to the next — see What halfORM defends, and what it cannot.

To report a vulnerability, see the security policy. Please do not open a public issue.

Advisories by release line

Read this list on the current documentation

Every published version of this site carries its own copy of this page, so the one you are reading can only know about advisories that existed when it was built. The list that is up to date is always the one at half-orm.github.io/half-orm/latest/security/.

Line Status Advisory
1.1 Current 1.1 advisory — fixed in 1.1.0
1.0 Superseded Affected by everything in the 1.1 advisory, and receives no fixes. Upgrade to 1.1
0.18 Maintenance, published as Beta 0.18 advisory — partly fixed in 0.18.14
Earlier End of life, published as Beta No advisory published, and none will be. Assume affected

A line with no advisory listed has had none published — not that none applies. Nothing here is a statement about code that has not been reviewed.