Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): remove CVE-2023-40590 and CVE-2023-41040 from the ignore list #459

Merged
merged 2 commits into from
Sep 13, 2023

Conversation

behnazh-w
Copy link
Member

@behnazh-w behnazh-w commented Sep 2, 2023

GitPython 3.1.35 fixes CVE-2023-40590 and CVE-2023-41040. This PR removes these CVEs from the pip-audit ignore list.

See https://github.com/gitpython-developers/GitPython/releases/tag/3.1.35

@behnazh-w behnazh-w requested a review from tromai as a code owner September 2, 2023 00:04
@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Sep 2, 2023
@behnazh-w behnazh-w force-pushed the pip-audit-CVE-2023-40590-fix branch from ec37ceb to 11a1b64 Compare September 13, 2023 06:31
@behnazh-w behnazh-w changed the title chore(deps): remove CVE-2023-40590 from the ignore list chore(deps): remove CVE-2023-40590 and CVE-2023-41040 from the ignore list Sep 13, 2023
@behnazh-w behnazh-w requested a review from tromai September 13, 2023 06:34
@behnazh-w behnazh-w merged commit 5815139 into staging Sep 13, 2023
@behnazh-w behnazh-w deleted the pip-audit-CVE-2023-40590-fix branch September 21, 2023 04:06
art1f1c3R pushed a commit that referenced this pull request Nov 29, 2024
… list (#459)

GitPython 3.1.35 fixes CVE-2023-40590 and CVE-2023-41040. This PR removes these CVEs 
from the pip-audit ignore list.

See https://github.com/gitpython-developers/GitPython/releases/tag/3.1.35

Signed-off-by: behnazh-w <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OCA Verified All contributors have signed the Oracle Contributor Agreement.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants