# What changed in tensorzero

> 4 changes in tensorzero 2026 from its official release notes, upgrade guides and advisories: 1 breaking, 1 security. Each one cited. Sources checked 2026-10-26. HTML: https://unstale.sh/pypi/tensorzero/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## tensorzero 2026

### Breaking changes

- SSE body decoding errors are now treated as fatal. (2026.5.1) — [release notes](https://github.com/tensorzero/tensorzero/releases/tag/2026.5.1)

### Security

- TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint (2026.6.0) — [security advisory](https://github.com/advisories/GHSA-824W-X939-6CMC), [release notes](https://github.com/tensorzero/tensorzero/releases/tag/2026.6.0)

### Behavior and default changes

- Additional OpenInference attributes are emitted for Arize compatibility. (2026.5.2) — [release notes](https://github.com/tensorzero/tensorzero/releases/tag/2026.5.2)

### Fixes and other changes

- The OpenAI-compatible inference endpoint accepts stop as either a string or an array of strings. (2026.5.2) — [release notes](https://github.com/tensorzero/tensorzero/releases/tag/2026.5.2)