Releases: ParzivalHack/PySpector
v0.1.5-beta: Inter-Procedural Taint Analysis & Graph-Based Engine Upgrade
What's New in v0.1.5
This release introduces a fundamental architectural shift in PySpector's core analysis engine, moving from local AST matching to project-wide graph-based tracking (finally, i would say lol)
Core Engine Upgrades
- Inter-Procedural Analysis: Track tainted data as it moves across function boundaries using global fixed-point iteration.
- Flow-Sensitive CFG: A brand new Control Flow Graph (CFG) engine ensures PySpector understands the execution order, significantly reducing false positives.
- Function Summaries: Introduced context-sensitive mapping to track how specific parameters flow into return values.
Bug Fixes
- Resolved a critical error in the Call Graph builder where function definitions were misidentified.
- Fixed edge-case handling in the Rust core during complex branch merging.
Documentation
- README updated with deep-dives into the new engine architecture and inter-procedural examples.
Full Changelog: v0.1.4-beta-hotfix...v0.1.5-beta
Hotfix: Fixed bug preventing SARIF reports from being created, fixed versioning throughout the codebase to reflect the current version, added stupid ass jokes cause if i'm already crying for my code, a laugh helps out
Hotfix: Fixed bug preventing SARIF reports from being created, fixed versioning throughout the codebase to reflect the current version, added stupid ass jokes cause if i'm already crying for my code, a laugh helps out
Full Changelog: v0.1.4-beta...v0.1.4-beta-hotfix
v0.1.4-beta: Minor improvements, a couple of bug fixes and a major website update with also a new design
Minor improvements, a couple of bug fixes and a major website update with also a new design.
Full Changelog: v0.1.3-beta...v0.1.4-beta
v0.1.3-beta: Major Bux Fixes, added plugin system to allow the creation of community plugins that go together with PySpector, added an AI exploit generator plugin for PySpector, updated docs
Major Bux Fixes, added plugin system to allow the creation of community plugins that go together with PySpector, added an AI exploit generator plugin for PySpector, updated docs.
Full Changelog: v0.1.3-beta...v0.1.3-beta
v0.1.2-beta: Major Bug fix in AST Analysis, minor documentation and rules enhancements
Major Bug fix in AST Analysis, minor documentation and rules enhancements
Full Changelog: v0.1.1-beta...v0.1.2-beta
v0.1.1-beta: AI Security Update + small fixes
Changelog for v0.1.1-beta:
Major Feature: AI/LLM Security Rules: We've added a massive new ruleset with over 100 checks specifically designed to find vulnerabilities in AI and LLM applications, including prompt injection, insecure model loading, and dangerous agent tool usage.
New Look: To give the tool a bit more personality, PySpector now greets you with a cool new ASCII art banner on startup.
Bug Fixes: We’ve squashed several bugs, including a crucial fix for the --ai flag and an important correction to our build configuration to ensure anyone can compile the Rust-powered core without issues.