Closed andy778 closed 4 months ago
I noticed I had a defect in my software CVE-2023-32681 that is fixed in requests 2.31.0, and that was updated here by depdendabot but no release after that. so this exists in blackduck 1.1.0 when one install with pip
I'll pick this up tomorrow evening.
Status?
Would be good to add the scorecard badge in this project https://securityscorecards.dev/ as then this root case will be more visible
https://pypi.org/project/blackduck/1.1.3/
I noticed I had a defect in my software CVE-2023-32681 that is fixed in requests 2.31.0, and that was updated here by depdendabot but no release after that. so this exists in blackduck 1.1.0 when one install with pip