1.4.3

• Bump astroid from 2.5 to 2.5.1

1.4.2

• Bump astroid from 2.4.2 to 2.5

1.4.1

Bump python-levenshtein from 0.12.1 to 0.12.2

1.4.0

• Improved parsing and error handling

1.3.12

Bump pyyaml from 5.4 to 5.4.1

1.3.11

Bump pyyaml from 5.3.1 to 5.4

1.3.10

Bump python-levenshtein from 0.12.0 to 0.12.1

1.3.9

CVE-2020-27783
moderate severity
Vulnerable versions: < 4.6.2
Patched version: 4.6.2

A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.

1.3.8

• Set default encoding to UTF-8
• Improve exception handling

1.3.7

• Fix duplicate line number search
• Add creditcards rule, ie: whispers -r creditcards src
• Improve Python parsing and detection