PyPI/aiir: medium
AIIR verification and policy gates could report success without enforcing the control (fail-open)
Action: Upgrade aiir to 1.7.0 or later.
pip install aiir==1.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-73p9-6hrp-8qhr
- https://github.com/invariant-systems-ai/aiir/security/advisories/GHSA-73p9-6hrp-8qhr
- https://github.com/invariant-systems-ai/aiir
published · modified · JSON