pypa / advisory-database

Advisory database for Python packages published on pypi.org
Creative Commons Attribution 4.0 International
254 stars 60 forks source link

PYSEC-2023-221 also fixed in 2.3.8 #172

Closed dehy closed 10 months ago

dehy commented 10 months ago

PYSEC-2023-221 was also fixed in legacy version 2.3.8 https://github.com/pallets/werkzeug/security/advisories/GHSA-hrfv-mqp8-q5rw

closes #171

sethmlarson commented 10 months ago

OSV lets you combine ranges in order to represent "branching" in versions and git, I've made the changes to your branch directly. Thank you! :rocket:

dehy commented 10 months ago

I'm not used to the file format so thank you 🙏