# netbox-sdk v0.0.7.post2

netbox-sdk v0.0.7.post2

| Field |Value |
| --- | --- |
| Canonical URL | https://emersonfelipesp.com/netbox-sdk/releases/v0.0.7.post2 |
| GitHub URL | https://github.com/emersonfelipesp/netbox-sdk/releases/tag/v0.0.7.post2 |
| Tag | v0.0.7.post2 |
| State | stable |
| Author | emersonfelipesp |
| Created | 2026-04-06 18:14 UTC |
| Published | 2026-04-06 18:19 UTC |
| Target | main |
| Synced | 2026-08-24 01:25 UTC |
| Assets | 0 |

## Release notes

## Summary

- **Security**: Updated dependencies to address dependabot vulnerabilities
  - `aiohttp` updated to >=3.13.4 (fixes 11 CVEs)
  - `requests` added >=2.33.0 (fixes temp file reuse vulnerability)
  - Transitive updates: pygments 2.20.0 (ReDoS fix)

- **Security Hardening**: Added timing-safe token comparison using `hmac.compare_digest()`
- **Security Documentation**: Added security considerations to core module docstrings

## What's Changed

- fix: update aiohttp to 3.13.4+ and add requests to address dependabot security alerts
- security: add timing-safe token comparison and security docs
- docs: update version references for v0.0.7.post2

**Full Changelog**: https://github.com/emersonfelipesp/netbox-sdk/compare/v0.0.7.post1...v0.0.7.post2

## Assets

No binary assets attached.

Source archives:

| Format |URL |
| --- | --- |
| zip | https://api.github.com/repos/emersonfelipesp/netbox-sdk/zipball/v0.0.7.post2 |
| tar.gz | https://api.github.com/repos/emersonfelipesp/netbox-sdk/tarball/v0.0.7.post2 |