app-store-server-library
The App Store Server Library
Activity
- Latest release
- 3mo ago
- Total releases
- 19
- Cadence
- ~2 months
- Last 12 months
- 5
Details
- License
- MIT
- First release
- Jun 08, 2023
| Version | Released | |
|---|---|---|
3.1.2
patch
|
3.1.2
patch
Dependencies (8)
|
|
3.1.1
patch
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
3.1.1
patch
Dependencies (8)
|
|
3.1.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
3.1.0
minor
Dependencies (8)
|
|
3.0.0
major
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
3.0.0
major
Dependencies (8)
|
|
2.0.0
major
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
2.0.0
major
Dependencies (8)
|
|
1.9.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.9.0
minor
Dependencies (8)
|
|
1.8.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.8.0
minor
Dependencies (8)
|
|
1.7.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.7.0
minor
Dependencies (8)
|
|
1.6.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.6.0
minor
Dependencies (8)
|
|
1.5.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.5.0
minor
Dependencies (8)
|
|
1.4.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.4.0
minor
Dependencies (7)
|
|
1.3.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.3.0
minor
Dependencies (7)
|
|
1.2.1
patch
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.2.1
patch
Dependencies (7)
|
|
1.2.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.2.0
minor
Dependencies (7)
|
|
1.1.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.1.0
minor
Dependencies (7)
|
|
1.0.0
major
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
1.0.0
major
Dependencies (7)
|
|
0.2.1
patch
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
0.2.1
patch
Dependencies (7)
|
|
0.2.0
minor
1 CVE
GHSA-8f6j-263m-g72x
Jul 13, 2026
Apple App Store Server Python Library: SignedDataVerifier accepts stale OCSP GOOD responses and can bypass certificate revocation checks
Medium
Network
Low
None
None
Summary
As a result, a previously valid signed OCSP Affected versions
0.2.0
0.2.1
1.0.0
1.1.0
1.2.0
1.2.1
1.3.0
1.4.0
1.5.0
1.6.0
1.7.0
1.8.0
+ 5 more Show less
1.9.0
2.0.0
3.0.0
3.1.0
3.1.1
Fixed in
3.1.2
References Updated Jul 14, 2026 · Source: OSV.dev |
0.2.0
minor
Dependencies (7)
|
|
0.1.0
initial
|
0.1.0
initial
Dependencies (7)
|