Fastapi-users

Latest version: v14.0.1

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 17

6.1.0

Not secure
New features

* Password validation feature: use your own function to validate password. It'll get called consistently at registration, password reset and user update. [[Documentation](https://frankie567.github.io/fastapi-users/configuration/password-validation/)]

Improvements

* Bump dependencies
* `fastapi >=0.63.0,<0.66.0`
* `pyjwt ==2.1.0`
* Improve documentation regarding JWTAuthentication's `tokenUrl` argument. Thanks eddsalkield 🎉

6.0.0

Not secure
Bug fixes

* Fix 600: the Tortoise ORM integration has been heavily reworked to better handle foreign keys and nested objects. **If you use Tortoise ORM, you should update your configuration to make it work**. [[Documentation](https://frankie567.github.io/fastapi-users/configuration/databases/tortoise/#tweak-userdb-model)]

5.1.4

Not secure
Bug fixes

* Fix 561: check if e-mail not already exists when updating e-mail.
* Fix 609: make behavior more consistent on request verify token. Now, it always returns 202 even if the user is already verified.

Improvements

* Document the `LOGIN_USER_NOT_VERIFIED` error code for the `/login` route.

5.1.3

Not secure
Improvements

* Allow `lifetime_seconds` to be `None` in `CookieAuthentication` to allow session cookies.
* Bump dependencies:
* `tortoise-orm >=0.16.0,<0.18.0`
* `ormar >=0.9.5,<0.10.0`

5.1.2

Not secure
Bug fixes

* Fix `BaseUserDB` typing by making `email`, `is_active`, `is_superuser` and `is_verified` non optional

5.1.1

Not secure
Improvements

* Fix 515: remove deprecated user callables in internal codebase
* Add `py.typed` to ensure mypy is type checking the library in external projects

Page 10 of 17

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.