cvat-ai/cvat v2.53.0

on GitHub

Changed

• [Server API] TUS upload endpoints no longer accept requests with no Content-Length header (#10098)

• [SDK] Package metadata no longer uses the deprecated Home-page and License fields (#10125)

Fixed

• Image scaling was not applied when image filter is enabled (#10111)

• Fixed TUS resumable upload validation to properly reject chunks that would exceed the declared file size (#10102)

• [SDK] Removed the redundant setuptools runtime dependency (#10125)

Security

• Fixed a directory traversal vulnerability in the /api/server/share endpoint (https://github.com/cvat-ai/cvat/security/advisories/GHSA-3g7v-xjh7-xmqx)