Udata

Latest version: v10.2.0

Safety actively analyzes 723963 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 14 of 30

2.6.0

Not secure
- Add resource's description and title size limit [2586](https://github.com/opendatateam/udata/pull/2586)
- Add RDF catalog view for organizations [2583](https://github.com/opendatateam/udata/pull/2583)

2.5.1

Not secure
- Add title's and description's length limit in forms [2585](https://github.com/opendatateam/udata/pull/2585)

2.5.0

Not secure
- Change reuse's form's label name to title [2575](https://github.com/opendatateam/udata/pull/2575)
- Unpublished posts are no longer served by the `Post.list` API endpoint [2578](https://github.com/opendatateam/udata/pull/2578)
- Read only mode can now be toggled in settings [2565](https://github.com/opendatateam/udata/pull/2565):
- Toggles a warning banner on the frontend view and a warning toast on the admin view.
- Prevents new users to register.
- Prevents non admin users to create new content such as organizations, datasets, community resources or discussions.
- Will return a `423` response code to any non-admin request to endpoints specified in `METHOD_BLOCKLIST` setting.
- Existing content can still be updated.
- Add an alert block in layout template, to be overrided in installed theme [2580](https://github.com/opendatateam/udata/pull/2580)

2.4.1

Not secure
- Escaping XML's forbidden characters [2562](https://github.com/opendatateam/udata/pull/2562)
- Ignore pattern feature for linkchecker [2564](https://github.com/opendatateam/udata/pull/2564)
- Fix TypeError when creating a superuser with an incorrect password [2567](https://github.com/opendatateam/udata/pull/2567)

2.4.0

Not secure
- :warning: Resources and community resources creation API change [2545](https://github.com/opendatateam/udata/pull/2545):
- Remove the RESOURCES_FILE_ALLOWED_DOMAINS setting and mechanism.
- The community resource's/resource's url could be set from the client side, even in the case of a hosted one, which is illogical.
A hosted community resource's/resource's url should only be the sole responsibility of the backend.
- Consequently, the POST endpoint of the community resources/resources API is only meant for the remote ones and the PUT endpoint of the community resources/resources API will take the existing resource's url to override the one sent by the client.
- Community resources changes [2546](https://github.com/opendatateam/udata/pull/2546):
- Dataset is now correctly set at community resource creation
- Remove now useless job 'purge-orphan-community-resources'
- Using the fs_filename logic when uploading a new resource on the data catalog.[2547](https://github.com/opendatateam/udata/pull/2547)
- Remove old file when updating resources and community resources from API [2548](https://github.com/opendatateam/udata/pull/2548)
- Sortable.js upgrade to fix an issue in udata's editorial page when reordering featured datasets [2550](https://github.com/opendatateam/udata/pull/2550)
- Password rotation mechanism [2551](https://github.com/opendatateam/udata/pull/2551):
- Datetime fields `password_rotation_demanded` and `password_rotation_performed` added to user model.
- Override Flask-Security's login and reset password forms to implement the password rotation checks.
- Password complexity settings hardening [2554](https://github.com/opendatateam/udata/pull/2554)
- Migrate ODS datasets urls [2559](https://github.com/opendatateam/udata/pull/2559)

2.3.0

Not secure
- Plugin's translations are now correctly loaded [2529](https://github.com/opendatateam/udata/pull/2529)
- Vine version is now pinned in requirements [2532](https://github.com/opendatateam/udata/pull/2532)
- Fix reuses metrics [2531](https://github.com/opendatateam/udata/pull/2531):
- Reuses "datasets" metrics are now triggered correctly
- New job to update the datasets "reuses" metrics: `update-datasets-reuses-metrics` to be scheduled
- Add a migration to set the reuses datasets metrics to the correct value [2540](https://github.com/opendatateam/udata/pull/2540)
- Add a specific dataset's method for resource removal [2534](https://github.com/opendatateam/udata/pull/2534)
- Flask-Security update [2535](https://github.com/opendatateam/udata/pull/2535):
- Switch to fork Flask-Security-Too
- New settings to set the required password length and complexity
- Fix Flask-security sendmail overriding [2536](https://github.com/opendatateam/udata/pull/2536)
- Add a custom password complexity checker to Flask-Security [2537](https://github.com/opendatateam/udata/pull/2537)
- Change too short password error message [2538](https://github.com/opendatateam/udata/pull/2538)

Page 14 of 30

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.