-
Notifications
You must be signed in to change notification settings - Fork 31
Open
Description
AST-07: End-of-Life Python Version Support
Severity: MEDIUM
Affected File(s): setup.py:51, tox.ini:2
Description
Project declares support for Python 3.6+ and tests against 3.6-3.9. All listed versions (3.6-3.9) have reached end-of-life and no longer receive security patches.
Vulnerable Code
python_requires=">=3.6"
envlist = py36,py37,py38,py39
Impact
Users running this connector on EOL Python versions are exposed to unpatched interpreter vulnerabilities.
Recommended Fix
Update minimum to python_requires=">=3.10" and test against 3.10-3.13.
Methodology: Triple-verification static analysis -- each finding verified across three independent code review passes.
Researcher: Independent Security Researcher -- Mefai Security Team
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels