Closed rv0lt closed 3 months ago
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 91.77%. Comparing base (
bad98cf
) to head (ca5a825
).
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
Check description for link to the release notes for the affected modules
Read this before submitting the PR
If there is a field which you are unsure about, enter the edit mode of this description or go to the PR template; There are invisible comments providing descriptions which may be of help.
1. Description / Summary
There was an indentified High cve with the Werkzeug library, this is an important module within Flask. And it being a mayor update have some cascade effect over other flask related libraries. In specific:
Flask login, patch update. From 0.6.2 to 0.6.3: https://github.com/maxcountryman/flask-login/releases/tag/0.6.3
Flask wtf, minor upate. From 1.0.0 to 1.1.2: https://github.com/wtforms/flask-wtf/releases
Flask httauth, minor update from 4.5.0 to 4.8.0 https://github.com/miguelgrinberg/flask-httpauth/blob/main/CHANGES.md
Werzeugh, from 2.2.3 to 3.0.3 https://github.com/pallets/werkzeug/blob/main/CHANGES.rst
In addition, one of the changes in Werzeugh affects the set_cookie function. With small changes in the variables being passed to it.
2. Jira task / GitHub issue
Link to the github issue or add the Jira task ID here.
3. Type of change
What type of change(s) does the PR contain?
Check the relevant boxes below. For an explanation of the different sections, enter edit mode of this PR description template.
4. Additional information
master
branch: _If checked, read the release instructions5. Actions / Scans
Check the boxes when the specified checks have passed.
For information on what the different checks do and how to fix it if they're failing, enter edit mode of this description or go to the PR template.