cbor2 5.7.1 has a security problem. However, the record decoding in Record stops working with cbor2 5.8.0.
I made a workaround for it like this:
def cbor2_load(fp):
return cbor2.CBORDecoder(fp, read_size=1).decode()
to record.py and then call I changed the code to call cbor2_load instead of cbor2.load.
It looks like they are going to revert the changed behaviour in cbor2, its issue this, so I won't make a PR for this, but thought I'd leave a comment here in case someone else needs to update cbor2 now.
cbor2 5.7.1 has a security problem. However, the record decoding in Record stops working with cbor2 5.8.0.
I made a workaround for it like this:
to record.py and then call I changed the code to call
cbor2_loadinstead ofcbor2.load.It looks like they are going to revert the changed behaviour in cbor2, its issue this, so I won't make a PR for this, but thought I'd leave a comment here in case someone else needs to update cbor2 now.