CVE-2018-18074

Advisory

Pyconll 1.1.0 updates 'requests' dependency to v2.20.0 due to a security flaw.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

--------------------

Added
~~~~~

- ``pylint`` to build process
- ``Conllable`` abstract base class to mark CoNLL serializable
components
- Tree data type construction of a sentence

Changed
~~~~~~~

- Linting patches suggested by ``pylint``.
- Removed ``_end_line_number`` from ``Sentence`` constructor. This is
an internal patch, as this parameter was not meant to be used by
callers.
- New, improved, and clearer documentation
- Update of ``requests`` dependency due to security flaw

Resources

• https://pypi.org/project/pyconll
• https://pyup.io/changelogs/pyconll/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074