Ussuri Series Release Notes


Security Issues

  • Uses json.loads instead of eval() for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under.


Upgrade Notes

  • Python 2 is no longer supported. Python 3 is required.