Niraj-Kamdar / question-paper-generator

The Question Paper Generator has been made to allow professors to generate question papers with random but enough questions to cover most chapters of a subject with specified difficulty and cognitive level and mail paper directly to the examiner in PDF format.
https://setnow.herokuapp.com/
MIT License
14 stars 19 forks source link

update urllib3 to >=1.24.2 in requirements.txt #274

Closed Niraj-Kamdar closed 4 years ago

Niraj-Kamdar commented 4 years ago

Bug:

product: urllib3 cve: CVE-2019-11324 severity: high Vulnerable versions: < 1.24.2 Patched version: 1.24.2 description: The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succeeding in situations where a verification failure is a correct outcome. This is related to the use of the ssl_context, ca_certs, or ca_certs_dir argument.

Fix:

Update urllib3 to version 1.24.2 or higher in requirements.txt and make sure it won't cause problems with other dependencies.