PyPI/nono-py: medium 5.2

nono-py's policy JSON accepts unknown security fields

Action: Upgrade nono-py to 0.10.1 or later.

pip install nono-py==0.10.1

Affected

Fixed versions

Sources

• osv: GHSA-m8j6-rc5x-wv36
• https://github.com/always-further/nono-py/security/advisories/GHSA-m8j6-rc5x-wv36
• https://github.com/nolabs-ai/nono-py/commit/2897ee20df0d75afd298d94840b9d135b3b3a6e9
• https://github.com/nolabs-ai/nono-py/commit/807fb4bce2385b9e88185bf160e0792b588813c7
• https://github.com/always-further/nono-py

published 2026-06-26T20:41:59Z · modified 2026-06-26T20:45:12.226949946Z · JSON