CellProfiler / python-bioformats

Read and write life sciences file formats
Other
125 stars 45 forks source link

Upgrade bioformats_package.jar #165

Open Sravani-K opened 6 months ago

Sravani-K commented 6 months ago

Hi, bioformats_package.jar older than 6.13 uses snakeyaml 1.32 which has a security vulnerability CVE-2022-1471. bioformats_package.jar 6.13 and later use snakeyaml 2.0 which has the fix.

So python-bioformats needs to be updated to use bioformats_package.jar > 6.13

see https://github.com/ome/bioformats/pull/3965 and relevant release notes.