search

BiomedSciAI / fuse-med-ml

A python framework accelerating ML based discovery in the medical field by encouraging code reuse. Batteries included :)
Apache License 2.0
134 stars 34 forks source link

Pinned protobuf version exposes CVE-2022-1941 #192

Closed vagenas closed 1 year ago

vagenas commented 1 year ago

Describe the bug\ Protobuf dependency currently pinned to 3.20.1 is exposing "high"-score vulnerability CVE-2022-1941.

FuseMedML version\ 0.2.5

Python version\ 3.8.1

To reproduce\ Check the currently pinned version.

Expected behavior\ A secure version of the dependency should be used.