SharonKoch / skf-labs

Repo for all the OWASP-SKF Docker lab examples
Apache License 2.0
0 stars 1 forks source link

Update dependency flask-cors to v4 - autoclosed #126

Closed mend-for-github-com[bot] closed 1 month ago

mend-for-github-com[bot] commented 1 month ago

This PR contains the following updates:

Package Update Change
flask-cors major ==3.0.10 -> ==4.0.2

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 7.5 CVE-2024-6221
Medium Medium 5.3 CVE-2024-1681

Release Notes

corydolphin/flask-cors (flask-cors) ### [`v4.0.2`](https://togithub.com/corydolphin/flask-cors/releases/tag/4.0.2) [Compare Source](https://togithub.com/corydolphin/flask-cors/compare/4.0.1...4.0.2) ##### What's Changed - Bump requests from 2.31.0 to 2.32.0 in /docs by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/corydolphin/flask-cors/pull/358](https://togithub.com/corydolphin/flask-cors/pull/358) - Backwards Compatible Fix for CVE-2024-6221 by [@​adrianosela](https://togithub.com/adrianosela) in [https://github.com/corydolphin/flask-cors/pull/363](https://togithub.com/corydolphin/flask-cors/pull/363) - Add unit tests for Private-Network by [@​corydolphin](https://togithub.com/corydolphin) in [https://github.com/corydolphin/flask-cors/pull/367](https://togithub.com/corydolphin/flask-cors/pull/367) ##### New Contributors - [@​dependabot](https://togithub.com/dependabot) made their first contribution in [https://github.com/corydolphin/flask-cors/pull/358](https://togithub.com/corydolphin/flask-cors/pull/358) - [@​adrianosela](https://togithub.com/adrianosela) made their first contribution in [https://github.com/corydolphin/flask-cors/pull/363](https://togithub.com/corydolphin/flask-cors/pull/363) **Full Changelog**: https://github.com/corydolphin/flask-cors/compare/4.0.1...4.0.2 ### [`v4.0.1`](https://togithub.com/corydolphin/flask-cors/blob/HEAD/CHANGELOG.md#401) [Compare Source](https://togithub.com/corydolphin/flask-cors/compare/4.0.0...4.0.1) ##### Security - Address [CVE-2024-1681](https://togithub.com/advisories/GHSA-84pr-m4jr-85g5) which is a log injection vulnerability when the log level is set to debug by [@​aneshujevic](https://togithub.com/aneshujevic) in [https://github.com/corydolphin/flask-cors/pull/351](https://togithub.com/corydolphin/flask-cors/pull/351) ### [`v4.0.0`](https://togithub.com/corydolphin/flask-cors/blob/HEAD/CHANGELOG.md#400) [Compare Source](https://togithub.com/corydolphin/flask-cors/compare/3.0.10...4.0.0) - Remove support for Python versions older than 3.8 by [@​WAKayser](https://togithub.com/WAKayser) in [https://github.com/corydolphin/flask-cors/pull/330](https://togithub.com/corydolphin/flask-cors/pull/330) - Add GHA tooling by [@​corydolphin](https://togithub.com/corydolphin) in [https://github.com/corydolphin/flask-cors/pull/331](https://togithub.com/corydolphin/flask-cors/pull/331)