Skip to content

chore: bump aiohttp version to resolve CVE-2024-23334 #779

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
AlaricWhitney wants to merge 3 commits into from
Closed

chore: bump aiohttp version to resolve CVE-2024-23334 #779

AlaricWhitney wants to merge 3 commits into from

Conversation

@AlaricWhitney
Copy link

@AlaricWhitney AlaricWhitney commented Mar 20, 2024 •
edited
Loading

Fixes

#780

Checklist

  • I acknowledge that all my contributions will be made under the project's license
  • I have made a material change to the repo (functionality, testing, spelling, grammar)
  • I have read the Contribution Guidelines and my PR follows them
  • I have titled the PR appropriately
  • I have updated my branch with the main branch
  • I have added tests that prove my fix is effective or that my feature works
  • I have added the necessary documentation about the functionality in the appropriate .md file
  • I have added inline documentation to the code I modified

@tiwarishubham635 tiwarishubham635 added dependencies pull requests that update a dependency file status: waiting for feedback waiting for feedback from the submitter labels Apr 4, 2024
@tiwarishubham635
Copy link
Contributor

tiwarishubham635 commented Apr 22, 2024

I think it depends on #783 becuase aiohttp==3.9.2 is not supported in python 3.7

@tiwarishubham635 tiwarishubham635 linked an issue Apr 22, 2024 that may be closed by this pull request
aiohttp version has multiple CVE's #780
Closed
@tiwarishubham635 tiwarishubham635 mentioned this pull request Apr 23, 2024
Merged
@tiwarishubham635
Copy link
Contributor

tiwarishubham635 commented May 22, 2024

Addressed by #791

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies pull requests that update a dependency file status: waiting for feedback waiting for feedback from the submitter

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

aiohttp version has multiple CVE's

2 participants

@AlaricWhitney @tiwarishubham635