Python Software Foundation t\u0259\u015fkilat\u0131, Python layih\u0259sinin infrastrukturuna h\u00fccum etm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259n burax\u0131l\u0131\u015f idar\u0259etm\u0259 API-sind\u0259 kritik z\u0259ifliyi a\u015fkar etdi. Z\u0259iflik, autentifikasiya sistemini a\u015fmaq v\u0259 ist\u0259nil\u0259n a\u00e7ar il\u0259 bir istifad\u0259\u00e7i ad\u0131 sah\u0259sind\u0259 admind\u0259n birini g\u00f6st\u0259r\u0259r\u0259k burax\u0131l\u0131\u015f idar\u0259etm\u0259 API-sin\u0259 giri\u015f \u0259ld\u0259 etm\u0259k imkan\u0131n\u0131 verdi. <\/p>\n
Z\u0259ifliyin u\u011furla istismar edilm\u0259si hal\u0131nda \u0259ld\u0259 olunan h\u00fcquqlar, h\u00fccum\u00e7unun python.org\/downloads s\u0259hif\u0259sind\u0259 yerl\u0259\u015f\u0259n Python burax\u0131l\u0131\u015flar\u0131n\u0131n linkl\u0259rin\u0259 v\u0259 y\u00fckl\u0259n\u0259n fayllar\u0131n d\u00fczg\u00fcnl\u00fcy\u00fcn\u00fc t\u0259sdiql\u0259m\u0259k \u00fc\u00e7\u00fcn metadata d\u0259yi\u015fdirm\u0259k imkan\u0131 verirdi. Bu z\u0259iflik, m\u00f6vcud burax\u0131l\u0131\u015f fayllar\u0131n\u0131n m\u0259zmununu d\u0259yi\u015fdirm\u0259k imkan\u0131n\u0131 t\u0259qdim etmirdi. <\/p>\n
Veritaban\u0131 v\u0259 log auditind\u0259 z\u0259ifliyin istismar olundu\u011funa dair h\u0259r hans\u0131 bir iz a\u015fkar edilm\u0259di. H\u0259m\u00e7inin, burax\u0131l\u0131\u015flar\u0131n linkl\u0259rinin d\u0259yi\u015fdirilm\u0259si, bir \u00e7ox t\u0259chizat\u00e7\u0131lar\u0131n y\u00fckl\u0259m\u0259 zaman\u0131 \u0259lav\u0259 olaraq Sigstore kodunun kriptoqrafik t\u0259sdiq sistemini v\u0259 PGP a\u00e7arlar\u0131 il\u0259 yoxlama istifad\u0259 etm\u0259si s\u0259b\u0259bind\u0259n he\u00e7 bir zaman gizli qala bilm\u0259zdi.<\/p>\n
Z\u0259iflik 2014-c\u00fc ild\u0259n kodda m\u00f6vcud idi v\u0259 API \u00fc\u00e7\u00fcn qonaq giri\u015fl\u0259ri v\u0259 a\u00e7arlarla autentifikasiya edilm\u0259si \u00fc\u00e7\u00fcn bir kod birl\u0259\u015fm\u0259sind\u0259n ir\u0259li g\u0259lirdi. API-y\u0259 giri\u015fd\u0259 a\u00e7arlar\u0131n autentifikasiyas\u0131 u\u011fursuz olduqda, kod qonaq giri\u015finin istifad\u0259sin\u0259 geri d\u00f6n\u00fcrd\u00fc. <\/p>\n
Z\u0259iflik 23 fevralda a\u015fkar edildi v\u0259 ert\u0259si g\u00fcn aradan qald\u0131r\u0131ld\u0131, bundan sonra infrastrukturun b\u00fct\u00f6vl\u00fcy\u00fcn\u00fc t\u0259min etm\u0259k \u00fc\u00e7\u00fcn bir ne\u00e7\u0259 yoxlama apar\u0131ld\u0131: 25 fevralda loglar v\u0259 veril\u0259nl\u0259rin ehtiyat n\u00fcsx\u0259l\u0259ri analiz edildi, y\u00fckl\u0259n\u0259 bil\u0259n b\u00fct\u00fcn resurslar Sigstore logundan v\u0259 PGP a\u00e7arlar\u0131ndan istifad\u0259 ed\u0259r\u0259k r\u0259q\u0259msal imzalarla yoxland\u0131, xidm\u0259tl\u0259rin istifad\u0259 olunan kod bazas\u0131 il\u0259 m\u00fcst\u0259qil audit apar\u0131ld\u0131. 23 aprel tarixind\u0259 kod bazas\u0131 AI al\u0259tl\u0259ri il\u0259 \u0259lav\u0259 olaraq yoxland\u0131, 1 iyun tarixind\u0259 python.org infrastrukturunun v\u0259 Python burax\u0131l\u0131\u015flar\u0131n\u0131n yarad\u0131lmas\u0131 prosesinin xarici auditi \u00fc\u00e7\u00fcn Trail of Bits \u015firk\u0259ti c\u0259lb edildi. \u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f Python Software Foundation \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 API \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Python. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a API \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0437\u0430\u043f\u0440\u043e\u0441\u0430 \u0441 \u043b\u044e\u0431\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c \u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u043f\u043e\u043b\u0435 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041f\u043e\u043b\u0443\u0447\u0430\u0435\u043c\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182333","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Python infrastrukturas\u0131nda bir bo\u015fluq, python.org sayt\u0131ndak\u0131 burax\u0131l\u0131\u015flar\u0131n linkl\u0259rini d\u0259yi\u015fdirm\u0259y\u0259 imkan tan\u0131y\u0131r | ProHoster","description":"Python Software Foundation t\u0259\u015fkilat\u0131, Python layih\u0259sinin infrastrukturuna h\u00fccum etm\u0259k \u00fc\u00e7\u00fcn istifad\u0259 oluna bil\u0259n burax\u0131l\u0131\u015f idar\u0259etm\u0259 API-sind\u0259 kritik z\u0259ifliyi a\u015fkar etdi.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/bresh-v-infrastrukture-python-pozvolyavshaya-podmenit-ssylki-na-relizy-na-sajte-python-org","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0440\u0435\u0448\u044c \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 Python, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0432\u0448\u0430\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0440\u0435\u043b\u0438\u0437\u044b \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 python.org | ProHoster","og:description":"\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f Python Software Foundation \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 API \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Python.","og:url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/bresh-v-infrastrukture-python-pozvolyavshaya-podmenit-ssylki-na-relizy-na-sajte-python-org","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-06-27T18:48:06+00:00","article:modified_time":"2026-06-27T18:48:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182333","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:14","updated":"2026-08-05 12:22:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/182333","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=182333"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/182333\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=182333"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=182333"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=182333"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
M\u0259nb\u0259: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"