Skip to content

chore: bump aiohttp version to resolve CVE-2024-23334 #779

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 3 commits into from
Closed

chore: bump aiohttp version to resolve CVE-2024-23334 #779

wants to merge 3 commits into from

Conversation

AlaricWhitney
Copy link

@AlaricWhitney AlaricWhitney commented Mar 20, 2024 •
edited
Loading

Fixes

#780

Checklist

  • I acknowledge that all my contributions will be made under the project's license
  • I have made a material change to the repo (functionality, testing, spelling, grammar)
  • I have read the Contribution Guidelines and my PR follows them
  • I have titled the PR appropriately
  • I have updated my branch with the main branch
  • I have added tests that prove my fix is effective or that my feature works
  • I have added the necessary documentation about the functionality in the appropriate .md file
  • I have added inline documentation to the code I modified

@tiwarishubham635 tiwarishubham635 added dependencies pull requests that update a dependency file status: waiting for feedback waiting for feedback from the submitter labels Apr 4, 2024
@tiwarishubham635
Copy link
Contributor

I think it depends on #783 becuase aiohttp==3.9.2 is not supported in python 3.7

@tiwarishubham635 tiwarishubham635 linked an issue Apr 22, 2024 that may be closed by this pull request
aiohttp version has multiple CVE's #780
Closed
@tiwarishubham635 tiwarishubham635 mentioned this pull request Apr 23, 2024
Merged
@tiwarishubham635
Copy link
Contributor

Addressed by #791

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies pull requests that update a dependency file status: waiting for feedback waiting for feedback from the submitter
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

aiohttp version has multiple CVE's
2 participants
@AlaricWhitney @tiwarishubham635