Security fixes for decryption paths + VCR cassette compatibility#235

Merged

jguz-pubnub merged 5 commits into

python-sec-fixes

Jul 8, 2026

Commits on Jun 26, 2026

Raise generic decryption error instead of leaking failure mode or returning ciphertext
jguz-pubnub
committed

Commits on Jun 29, 2026

Strip dead python-object URL tags from asyncio VCR cassettes so vcrpy's hardened SafeLoader can deserialize them
jguz-pubnub
committed
Minor fix in workers.py
jguz-pubnub
committed

Commits on Jul 7, 2026

Log undecryptable message content at debug level instead of hiding it
jguz-pubnub
committed

Commits on Jul 8, 2026

PubNub SDK 10.7.2 release.
pubnub-release-bot
committed