Uvicorn

Latest version: v0.34.0

Safety actively analyzes 723158 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 10 of 13

0.12.0

Not secure
Added
- Make reload delay configurable (774)
- Upgrade maximum h11 dependency version to 0.10 (772)
- Allow .json or .yaml --log-config files (665)
- Add ASGI dict to the lifespan scope (754)
- Upgrade wsproto to 0.15.0 (750)
- Use optional package installs (666)

Changed
- Don't set log level for root logger (767) 8/28/20 df81b168
- Uvicorn no longer ships extra dependencies `uvloop`, `websockets` and `httptools` as default.
To install these dependencies use `uvicorn[standard]`.

Fixed
- Revert "Improve shutdown robustness when using `--reload` or multiprocessing (620)" (756)
- Fix terminate error in windows (744)
- Fix bug where --log-config disables uvicorn loggers (512)

0.11.8

Not secure
* Fix a regression that caused Uvicorn to crash when using `--interface=wsgi`. (730)
* Fix a regression that caused Uvicorn to crash when using unix domain sockets. (729)

0.11.7

Not secure
* SECURITY FIX: Prevent sending invalid HTTP header names and values. (725)
* SECURITY FIX: Ensure path value is escaped before logging to the console. (724)
* Fix `--proxy-headers` client IP and host when using a Unix socket. (636)

0.11.6

Not secure
* Fix overriding the root logger.

0.11.5

Not secure
* Revert "Watch all files, not just .py" due to unexpected side effects.
* Revert "Pass through gunicorn timeout config." due to unexpected side effects.

0.11.4

Not secure
* Use `watchgod`, if installed, for watching code changes.
* Watch all files, not just .py.
* Pass through gunicorn timeout config.

Page 10 of 13

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.