CVE-2018-18074

Advisory

Contentful 1.11.3 updates 'requests' version due to a vulnerability found in versions '2.19' and below.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Fixed
* Errors are now being correctly propagated through the chain of relationships.
* Links in `RichText` fields, that are published but unreachable, due to not having enough include depth on the request, are now returned as `Link` objects.

Changed
* Updated `requests` version due to a vulnerability found in versions `2.19` and below.
* Included resources for embedded entries and assets in Rich Text fields are now properly serialized to `data.target` instead of the top level `data`.

Resources

• https://pypi.org/project/contentful
• https://pyup.io/changelogs/contentful/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074