waditu / tushare

TuShare is a utility for crawling historical data of China stocks
BSD 3-Clause "New" or "Revised" License
12.88k stars 4.29k forks source link

fix(sec): upgrade lxml to 4.9.1 #1689

Closed jerjjj closed 1 year ago

jerjjj commented 1 year ago

What happened?

There are 1 security vulnerabilities found in lxml 3.8.0

What did I do?

Upgrade lxml from 3.8.0 to 4.9.1 for vulnerability fix

What did you expect to happen?

Ideally, no insecure libs should be used.

The specification of the pull request

PR Specification from OSCS