GHSA-pp84-v3mw-gg4w
Suggest an improvement- Source
- https://github.com/advisories/GHSA-pp84-v3mw-gg4w
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/08/GHSA-pp84-v3mw-gg4w/GHSA-pp84-v3mw-gg4w.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-pp84-v3mw-gg4w
- Published
- 2024-08-27T19:50:54Z
- Modified
- 2024-08-27T20:04:17.683792Z
- Summary
- Taipy 3.1.1 affected by CVEs on flask-core and pymongo
- Details
-
Summary
CVEs on latest 3.1.1
Details
SECURITY ISSUES
CVE-2024-1681: flask-core <4.0.1
latest version of taipi 3.1.1 needs <=4.0.0
CVE-2024-5629: pymongo <4.6.3
latest version of taipi 3.1.1 needs <=4.6.1
PoC
please upgrade to these versions
Impact
pre-commit breaks
- References
Affected packages
PyPI / taipy
Package
- Name
- taipy
- View open source insights on deps.dev
- Purl
- pkg:pypi/taipy