Ussuri Series Release Notes¶
3.0.1¶
Security Issues¶
Uses
json.loads
instead ofeval()
for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under.
3.0.0¶
Upgrade Notes¶
Python 2 is no longer supported. Python 3 is required.