Synapse

Latest version: v2.205.0

Safety actively analyzes 723296 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 30 of 60

2.55.0

Not secure
====================

Features and Enhancements
-------------------------

- Add ``$node.props.set()`` Stormtypes API to allow programmatically setting
node properties.
(`2324 <https://github.com/vertexproject/synapse/pull/2324>`_)
- Deny non-runtsafe invocations of the following Storm commands:
(`2326 <https://github.com/vertexproject/synapse/pull/2326>`_)

- ``graph``
- ``iden``
- ``movetag``
- ``parallel``
- ``tee``
- ``tree``

- Add a ``Axon.hashset()`` API to get the md5, sha1, sha256 and sha512 hashes
of file in the Axon. This is exposed in Stormtypes via the
``$lib.bytes.hashset()`` API.
(`2327 <https://github.com/vertexproject/synapse/pull/2327>`_)
- Add the ``synapse.servers.stemcell`` server and a new Docker image,
``vertexproject/synaspe-stemcell``. The Stemcell server is similar to the
``synapse.servers.cell`` server, except it resolves the Cell ctor from the
``cell:ctor`` key from the ``cell.yaml`` file, or from the
``SYN_STEM_CELL_CTOR`` environment variable.
(`2328 <https://github.com/vertexproject/synapse/pull/2328>`_)

2.54.0

Not secure
====================

Features and Enhancements
-------------------------

- Add ``storm-envvar`` directive to RST preprocessor to include environment
variables in ``storm-pre`` directive execution context.
(`2321 <https://github.com/vertexproject/synapse/pull/2321>`_)
- Add new ``diff`` storm command to allow users to easily lift the set of nodes
with changes in the top layer of a forked view. Also adds the ``--no-tags``
option to the ``merge`` command to allow users to omit ``tag:add`` node edits
and newly constructed ``syn:tag`` nodes when merging selected nodes.
(`2320 <https://github.com/vertexproject/synapse/pull/2320>`_)
- Adds the following properties to the data model:
(`2319 <https://github.com/vertexproject/synapse/pull/2319>`_)

- ``biz:deal:buyer:org``
- ``biz:deal:buyer:orgname``
- ``biz:deal:buyer:orgfqdn``
- ``biz:deal:seller:org``
- ``biz:deal:seller:orgname``
- ``biz:deal:seller:orgfqdn``
- ``biz:prod:madeby:org``
- ``biz:prod:madeby:orgname``
- ``biz:prod:madeby:orgfqdn``
- ``ou:opening:posted``
- ``ou:opening:removed``
- ``ou:org:vitals``

- Updates ``storm-mock-http`` to support multiple HTTP requests/responses
in RST preprocessor.
(`2317 <https://github.com/vertexproject/synapse/pull/2317>`_)

2.53.0

Not secure
====================

This release contains an automatic data migration that may cause additional
startup time on the first boot. This is done to unique array properties which
previously were not uniqued. Deployments with startup or liveliness probes
should have those disabled while this upgrade is performed to prevent
accidental termination of the Cortex process. Please ensure you have a tested
backup available before applying this update.

Features and Enhancements
-------------------------
- Add an ``embeds`` option to Storm to allow extracting additional data
when performing queries.
(`2314 <https://github.com/vertexproject/synapse/pull/2314>`_)
- Enforce node data permissions at the Layer boundary. Remove the
``node.data.get`` and ``node.data.list`` permissions.
(`2311 <https://github.com/vertexproject/synapse/pull/2311>`_)
- Add ``auth.self.set.email``, ``auth.self.set.name``,
``auth.self.set.passwd`` permissions on users when changing those values.
These permissions default to being allowed, allowing a rule to be created
that can deny users from changing these values.
(`2311 <https://github.com/vertexproject/synapse/pull/2311>`_)
- Add ``$lib.inet.smtp`` to allow sending email messages from Storm.
(`2315 <https://github.com/vertexproject/synapse/pull/2315>`_)
- Warn if a LMDB commit operation takes too long.
(`2316 <https://github.com/vertexproject/synapse/pull/2316>`_)
- Add new data types, ``taxon`` and ``taxonomy``, to describe hierarchical
taxonomies.
(`2312 <https://github.com/vertexproject/synapse/pull/2312>`_)
- Add a new Business Development model. This allows tracking items related to
contract, sales, and purchasing lifecycles. This adds the following new forms
to the data model: ``biz:dealtype``, ``biz:prodtype``, ``biz:dealstatus``,
``biz:rfp``, ``biz:deal``, ``biz:bundle``, ``biz:product``, and
``biz:stake``. The Org model is also updated to add new forms for supporting
parts of the business lifecycle, adding ``ou:jobtype``,
``ou:jobtitle``, ``ou:employment``, ``ou:opening``, ``ou:vitals``,
``ou:camptype``, and ``ou:orgtype``, ``ou:conttype`` forms. The Person model
got a new form, ``ps:workhist``.
(`2312 <https://github.com/vertexproject/synapse/pull/2312>`_)
- Add a ``:deleted`` property to ``inet:web:post``.
(`2312 <https://github.com/vertexproject/synapse/pull/2312>`_)
- Update the following array properties to be unique sets, and add a data
model migration to update the data at rest:
(`2312 <https://github.com/vertexproject/synapse/pull/2312>`_)

- ``edu:course:prereqs``
- ``edu:class:assistants``
- ``ou:org:subs``
- ``ou:org:names``
- ``ou:org:dns:mx``
- ``ou:org:locations``
- ``ou:org:industries``
- ``ou:industry:sic``
- ``ou:industry:subs``
- ``ou:industry:isic``
- ``ou:industry:naics``
- ``ou:preso:sponsors``
- ``ou:preso:presenters``
- ``ou:conference:sponsors``
- ``ou:conference:event:sponsors``
- ``ou:conference:attendee:roles``
- ``ou:conference:event:attendee:roles``
- ``ou:contract:types``
- ``ou:contract:parties``
- ``ou:contract:requirements``
- ``ou:position:reports``
- ``ps:person:names``
- ``ps:person:nicks``
- ``ps:persona:names``
- ``ps:persona:nicks``
- ``ps:education:classes``
- ``ps:contactlist:contacts``

Bugfixes
--------
- Prevent renaming the ``all`` role.
(`2313 <https://github.com/vertexproject/synapse/pull/2313>`_)

Improved Documentation
----------------------
- Add documentation about Linux kernel parameteres which can be tuned to
affect Cortex performance.
(`2316 <https://github.com/vertexproject/synapse/pull/2316>`_)

2.52.1

Not secure
====================

Bugfixes
--------
- Fix a display regression when enumerating Cron jobs with the Storm
``cron.list`` command.
(`2309 <https://github.com/vertexproject/synapse/pull/2309>`_)

2.52.0

Not secure
====================

Features and Enhancements
-------------------------
- Add a new specification for defining input forms that a pure Storm command
knows how to natively handle.
(`2301 <https://github.com/vertexproject/synapse/pull/2301>`_)
- Add ``Lib.reverse()`` and ``Lib.sort()`` methods to Stormtypes API.
(`2306 <https://github.com/vertexproject/synapse/pull/2306>`_)
- Add ``View.parent`` property in Stormtypes API.
(`2306 <https://github.com/vertexproject/synapse/pull/2306>`_)
- Support Telepath Share objects in Storm.
(`2293 <https://github.com/vertexproject/synapse/pull/2293>`_)
- Allow users to specify a view to run a cron job against, move a cron job to
a new view, and update permission check for adding/moving cron jobs to views.
(`2292 <https://github.com/vertexproject/synapse/pull/2292>`_)
- Add CPE and software name infomation to the ``inet:flow`` form. Add
``it:av:prochit``, ``it:exec:thread``, ``it:exec:loadlib``,
``it:exec:mmap``, ``it:app:yara:procmatch`` forms to the infotech model.
Add ``:names`` arrays to ``it:prod:soft`` and ``it:prod:softver`` forms
to assist in entity resolution of software. Add a ``risk:alert`` form to
the risk model to allow for capturing arbitrary alerts.
(`2304 <https://github.com/vertexproject/synapse/pull/2304>`_)
- Allow Storm packages to specify other packages they require and possible
conflicts would prevent them from being installed in a Cortex.
(`2307 <https://github.com/vertexproject/synapse/pull/2307>`_)

Bugfixes
--------
- Specify the View when lifting ``syn:trigger`` runt nodes.
(`2300 <https://github.com/vertexproject/synapse/pull/2300>`_)
- Update the scrape URL regular expression to ignore trailing periods and
commas.
(`2302 <https://github.com/vertexproject/synapse/pull/2302>`_)
- Fix a bug in Path scope for nodes yielding by pure Storm commands.
(`2305 <https://github.com/vertexproject/synapse/pull/2305>`_)

2.51.0

Not secure
====================

Features and Enhancements
-------------------------
- Add a ``--size`` option to the Storm ``divert`` command to limit the number
of times the generator is iterated.
(`2297 <https://github.com/vertexproject/synapse/pull/2297>`_)
- Add a ``perms`` key to the pure Storm command definition. This allows for
adding intuitive permission boundaries for pure Storm commands which are
checked prior to command execution.
(`2297 <https://github.com/vertexproject/synapse/pull/2297>`_)
- Allow full properties with comparators when specifying the destination
or source when walking light edges.
(`2298 <https://github.com/vertexproject/synapse/pull/2298>`_)

Bugfixes
--------
- Fix an issue with LMDB slabs not being backed up if their directories did
not end in ``.lmdb``.
(`2296 <https://github.com/vertexproject/synapse/pull/2296>`_)

Page 30 of 60

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.