CVE-2018-18074

Advisory

Cromwell-tools 1.0.0 updates requests to v2.20.0 to avoid security issues.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changes:
- A breaking refactoring work on both the CLI and API.
- More sophisticated unit tests.
- Support both Python2 and Python3, having tests run on both versions.
- Updated ReadMe file and docstrings.
- For `/submit` endpoint, we support both path to the file and file contents as inputs now.
- We have a quickstart example Jupyter Notebook now.
- Update requests to avoid security issues.
- Fix API calls in CLI.
- We have accessory tools with cromwell-tools, such as the workflow monitoring script.
- Other slight improvements and bug fixes.

**Note**: from this version we will start to publish this package on PyPI.

Resources

• https://pypi.org/project/cromwell-tools
• https://pyup.io/changelogs/cromwell-tools/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074