Search results

TypeScript SDK missing watchPrices, watchUserPositions, watchUserTransactions — Limitless WebSocket streaming methods absent from TS client

core-sdk-gapCore engine capabilities not exposed in SDKsCore engine capabilities not exposed in SDKs

Status: Open.

#1288 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

SDK drift: Python hosted _hosted_build_order_request validates limit-order price presence and positivity; TypeScript _hostedBuildOrderBody does not

sdk-driftCross-language SDK consistency findings (TypeScript vs Python)Cross-language SDK consistency findings (TypeScript vs Python)

Status: Open.

#1287 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

SDK drift: Python hosted build_order raises MissingWalletAddress at build time when wallet_address is unset; TypeScript defers the error to submit time

sdk-driftCross-language SDK consistency findings (TypeScript vs Python)Cross-language SDK consistency findings (TypeScript vs Python)

Status: Open.

#1286 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

SDK drift: Python exports Polymarket_us (snake_case) alias for PolymarketUS; TypeScript has no equivalent alias

sdk-driftCross-language SDK consistency findings (TypeScript vs Python)Cross-language SDK consistency findings (TypeScript vs Python)

Status: Open.

#1285 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

SDK drift: Python _discover_hosted_account and _execute_sor_order use the requests library; TypeScript uses native fetch; Python's own HTTP library is httpx

sdk-driftCross-language SDK consistency findings (TypeScript vs Python)Cross-language SDK consistency findings (TypeScript vs Python)

Status: Open.

#1284 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

SDK drift: Python watch_order_books accepts deprecated ids kwarg with DeprecationWarning; TypeScript watchOrderBooks has no equivalent backward-compat handling

sdk-driftCross-language SDK consistency findings (TypeScript vs Python)Cross-language SDK consistency findings (TypeScript vs Python)

Status: Open.

#1283 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

HIGH: wheel@0.42.0 — Path Traversal in unpack allows arbitrary file permission modification (CVE-2026-24049 / GHSA-8rrh-rw8j-w5fx)

dependency-vulnerabilityDependency security vulnerability findingsDependency security vulnerability findings

pythonPython SDK specificPython SDK specific

type: security

Status: Open.

#1277 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

HIGH: pip@24.0 — Path traversal in wheel archive extraction allows file write outside install directory (CVE-2026-1703 / GHSA-6vgw-5pg2-w6jp)

dependency-vulnerabilityDependency security vulnerability findingsDependency security vulnerability findings

pythonPython SDK specificPython SDK specific

type: security

Status: Open.

#1276 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

HIGH: cryptography@41.0.7 — Bundled OpenSSL vulnerable to June 2026 security advisory (GHSA-537c-gmf6-5ccf)

dependency-vulnerabilityDependency security vulnerability findingsDependency security vulnerability findings

pythonPython SDK specificPython SDK specific

type: security

Status: Open.

#1275 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

HIGH: urllib3@2.6.3 — Proxy credential leak via cross-origin redirects in ProxyManager low-level API (CVE-2026-44431 / GHSA-qccp-gfcp-xxvc)

dependency-vulnerabilityDependency security vulnerability findingsDependency security vulnerability findings

pythonPython SDK specificPython SDK specific

type: security

Status: Open.

#1274 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

HIGH: setuptools@68.1.2 — Path Traversal in PackageIndex._download_url allows arbitrary file write (CVE-2025-47273 / GHSA-5rjg-fvgr-3xxf)

dependency-vulnerabilityDependency security vulnerability findingsDependency security vulnerability findings

pythonPython SDK specificPython SDK specific

type: security

Status: Open.

#1273 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026

HIGH: setuptools@68.1.2 — Remote Code Execution in package_index download functions (CVE-2024-6345 / GHSA-cx63-2mw6-8hw5)

dependency-vulnerabilityDependency security vulnerability findingsDependency security vulnerability findings

pythonPython SDK specificPython SDK specific

type: security

Status: Open.

#1272 In pmxt-dev/pmxt;

· realfishsam opened on Jun 22, 2026