Skip to content

Commit c13ea9a

Browse files
committed
[Fix] Websocket package version issues
Websocket package version issues: The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
1 parent b967d90 commit c13ea9a

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

client/python/requirements.txt

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,5 +44,5 @@ typing-extensions==3.7.4.3
4444
urllib3==1.26.4
4545
webcolors==1.11.1
4646
webencodings==0.5.1
47-
websockets==8.1
47+
websockets==10.1
4848
wrapt==1.12.1

client/python/upbit/pkginfo.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ def _get_versions(package_name):
2929
PACKAGE_NAME = 'upbit-client'
3030

3131
OPEN_API_VERSION = '1.2.2'
32-
CURRENT_VERSION = OPEN_API_VERSION+'.0'
32+
CURRENT_VERSION = OPEN_API_VERSION+'.1'
3333

3434
RELEASED_VERSION = _get_versions(PACKAGE_NAME)
3535
LATEST_VERSION = RELEASED_VERSION[0]

client/python/upbit/websocket.py

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -172,12 +172,12 @@ def generate_payload(
172172

173173
return json.dumps(payload)
174174

175-
async def __aenter__(self) -> websockets.client.WebSocketClientProtocol:
175+
async def __aenter__(self):
176176
return await self.Connection.__aenter__()
177177

178-
async def __aexit__(self, exc_type, exc_value, traceback) -> None:
178+
async def __aexit__(self, exc_type, exc_value, traceback):
179179
await self.Connection.__aexit__(exc_type, exc_value, traceback)
180-
180+
181181
def __str__(self):
182182
return self.__repr__()
183183

0 commit comments

Comments
 (0)