CVE-2021-41945

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

Fixed

- Use latest Solders version to make objects pickleable again [(252)](https://github.com/michaelhly/solana-py/pull/252).


Changed

- Updated httpx to fix critical vulnerability [(248)](https://github.com/michaelhly/solana-py/pull/248).
- Updated pytest, websockets, pytest-docker, pytest-asyncio to latest. [(254)](https://github.com/michaelhly/solana-py/pull/254).
- Updated apischema to latest. [(254)](https://github.com/michaelhly/solana-py/pull/254).


Added

- Added `get_latest_blockhash` RPC Call. [(254)](https://github.com/michaelhly/solana-py/pull/254).
- Added `get_fee_for_message` RPC Call. [(254)](https://github.com/michaelhly/solana-py/pull/254).
- Added confirmation strategy which checks if the transaction has exceeded last valid blockheight. [(254)](https://github.com/michaelhly/solana-py/pull/254).
- Added `asyncio_mode = auto` in pytest.ini. [(248)](https://github.com/michaelhly/solana-py/pull/254).
- Added an optional `verify_signature` bool when `transaction.serialize()` is called [(249)](https://github.com/michaelhly/solana-py/pull/249).
- Added Memo program [(249)](https://github.com/michaelhly/solana-py/pull/249).

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41945